test: add core component acceptance infrastructure - #841

Open

kvinwang wants to merge 198 commits into

nextfrom

codex/core-components-test-infrastructure

Commits on Aug 14, 2026

test(infrastructure): add deterministic component harnesses
kvinwang
committed
484e24d
test(plan): define core component acceptance coverage
kvinwang
committed
386a0c1
test(results): promote verified component coverage
kvinwang
committed
fab7310
docs(testing): account for split product commits
kvinwang
committed
691d89a
docs(testing): record product PR split audit
kvinwang
committed
1e23338
docs(testing): account for simulator PR split
kvinwang
committed
868304c
docs(testing): retain merged PRs in split inventory
kvinwang
committed
d2219c2
test(simulator): enforce configured TPM node ownership
kvinwang
committed
8befd32
docs(testing): account for TPM ownership correction
kvinwang
committed
f840509
Revert "test(simulator): enforce configured TPM node ownership"
kvinwang
committed
e78558f
docs(testing): reject TPM node race tolerance
kvinwang
committed
6b51195
docs(testing): add simulator retest watchlist
kvinwang
committed
c1665b8
test(gateway): use existing health and dashboard routes
kvinwang
committed
e822ca0
test(verifier): assert simulator trust-root isolation
kvinwang
committed
3cf9e55
test(verifier): validate embedded cache versions
kvinwang
committed
ac6ad7f
docs(testing): align rewritten PR accounting
kvinwang
committed
66954af
test(guest): validate normal swap boot lifecycle
kvinwang
committed
2576259
docs(testing): record closed supervisor socket PR
kvinwang
committed
3225004
test(supervisor): validate UDS auto-start lifecycle
kvinwang
committed
d03b282
test(util): validate certificate outputs independently
kvinwang
committed
2100057
test(supervisor): separate client lifecycle coverage
kvinwang
committed
4336246
test(gateway): drop DNS credential encryption assumptions
kvinwang
committed
bae8ab3
test(gateway): cover app-address DNS failover
kvinwang
committed
a65037a
test(guest): pin wg-checker timing to a uniform 10s clock
kvinwang
committed
12265d5
test(vmm): cover filesystem-only CID reload
kvinwang
committed
3893d91
test(gateway): register upgrade domain through admin API
kvinwang
committed
b4fb098
test(gateway): provision upgrade domain through certbot
kvinwang
committed
12266d2
test(vmm): preserve stopped VM CID on reload
kvinwang
committed
e38e891
test(guest): retarget tc-gos-observabil-003 at the gateway checker
kvinwang
committed
19d3e66
test(gateway): cover ACME credential rotation
kvinwang
committed
ce6f23d
test(kms): cover CA persistence and renewal
kvinwang
committed
c8b49c6
test(vmm): retarget tc-vmm-serial-006 at log rotation
kvinwang
committed
88dd497
test(vmm): cover libvirt network filter lifecycle
kvinwang
committed
f36bcf9
test(vmm): wait for restarted netd listener
kvinwang
committed
3cbb4f6
test(vmm): avoid destructive netd readiness probe
kvinwang
committed
517db0b
test(vmm): read generated NIC MACs from launch plan
kvinwang
committed
871cfe6
test(vmm): isolate secondary host API port
kvinwang
committed
266c15c
test(vmm): inject spoof traffic on the host interface
kvinwang
committed
f96ab95
test(vmm): preserve failure evidence and force cleanup
kvinwang
committed
1702ad0
test(vmm): verify filtered network survives QEMU restart
kvinwang
committed
c6b7a3f
test(kms): restore sign-cert fixture binary
kvinwang
committed
384a96c
test: follow current guest and VMM configuration
kvinwang
committed
df7be73
test(runner): retain sweep failure diagnostics
kvinwang
committed
b8a742a
test(tdxlab): prepare deterministic run prerequisites
kvinwang
committed
de210c5
test(tdxlab): provision pinned Foundry tools
kvinwang
committed
561c625
chore(kms): refresh authorization Bun locks
kvinwang
committed
431914a
test(kms): resolve prepared startup binary
kvinwang
committed
8db4365
test(tdxlab): resolve user toolchain paths
kvinwang
committed
b0782e7
test(kms): accept canonical empty Finish response
kvinwang
committed
b9ff2a5
test(tdxlab): document prepared execution path
kvinwang
committed
0f3ac12
test(runner): fail sweeps with nonpassing cases
kvinwang
committed
98f1623
test(gateway): follow current debug config
kvinwang
committed
87aac80
test(attestation): prepare legacy TDX image verification
kvinwang
committed
6dc9840
test(attestation): refresh NitroTPM replay fixture
kvinwang
committed
338b92b
test(guest): retain gateway checker failure context
kvinwang
committed
2d64eae
test(tdxlab): build candidate guest prerequisites
kvinwang
committed
04456ca
test(tdxlab): build images from a clean worktree
kvinwang
committed
c8705b5
test(tdxlab): discover flavor-specific mkosi outputs
kvinwang
committed
dc192f1
test(gateway): follow current public RPC route
kvinwang
committed
67ddb31
test(tdxlab): prepare current GCP TPM replay
kvinwang
committed
428af63
test(guest): capture gateway checker exit codes safely
kvinwang
committed
6696404
test(mkosi): prepare ephemeral OpenSSH host keys
kvinwang
committed
0f6054b
test(guest): use deterministic quote output fault
kvinwang
committed
ac51074
test(guest): use deterministic app-key output fault
kvinwang
committed
f1bb8bc
test(guest): follow atomic random output replacement
kvinwang
committed
5062bd1
test(guest): use deterministic attestation output fault
kvinwang
committed
47350a1
test(guest): use deterministic get-keys output fault
kvinwang
committed
3c0b36a
test(simulator): prepare platform replay fixtures
kvinwang
committed
ed59cfa
test(gateway): follow current RPC response contracts
kvinwang
committed
c7351c4
test(kms): accept current Empty JSON encoding
kvinwang
committed
0a5abda
test(kms): follow cloned shutdown handle
kvinwang
committed
f8e915f
test(verifier): follow certificate profile validation
kvinwang
committed
1e66f8f
test(verifier): use a valid oneshot config port
kvinwang
committed
4306551
test(vmm): follow missing log response contract
kvinwang
committed
4e41f2f
test(vmm): materialize mutable image fixtures
kvinwang
committed
4a3f06f
test(kms): follow current root-key handover
kvinwang
committed
7ee5f29
test(gateway): isolate fixture WireGuard subnets
kvinwang
committed
8b20c37
test(gateway): follow current public info route
kvinwang
committed
adfc1c4
test(gateway): accept current Empty exit response
kvinwang
committed
9ce8197
test(gateway): verify malformed Empty framing
kvinwang
committed
2f16948
test(gateway): follow current debug configuration
kvinwang
committed
b7f298d
test(gateway): follow on-demand TLS key generation
kvinwang
committed
4f7a1b8
test(gateway): edit prepared TLS paths by section
kvinwang
committed
c72dba0
test(gateway): accept current DNS Empty responses
kvinwang
committed
751bf4e
test(gateway): follow current certificate store suite
kvinwang
committed
456413e
test(vmm): follow private CID state contract
kvinwang
committed
3dfd108
test(vmm): stage reload fixtures across filesystems
kvinwang
committed
ba4dcc5
test(vmm): prepare management port for config checks
kvinwang
committed
72b953b
test(vmm): follow current UI RPC diagnostics
kvinwang
committed
48f45ab
test(vmm): follow current internal source matrices
kvinwang
committed
6ff499a
test(guest): prepare a shell-capable log fixture image
kvinwang
committed
40cb233
test(guest): capture log fixture preparation diagnostics
kvinwang
committed
85aadd7
test(tdxlab): prepare dashboard log workload image
kvinwang
committed
97333a4
test(tdxlab): bind dashboard preparation to case identity
kvinwang
committed
88efa0d
test(kms): prepare finalized Ethereum head
kvinwang
committed
4603f64
test(integration): follow current gateway admin contract
kvinwang
committed
680cf61
test(tdxlab): preserve guest image integrity
kvinwang
committed
f5b5b5c
test(integration): bound gateway DNS fixture waits
kvinwang
committed
bdbbf90
test(integration): accept compatible Exit request evolution
kvinwang
committed
245f86b
style(test): format integration matrix
kvinwang
committed
4082a7e
test(integration): use mock DNS listener port
kvinwang
committed
0fee423
test(fixtures): bind cleanup to prepared state root
kvinwang
committed
6f9db7f
test(integration): pin mock DNS zone
kvinwang
committed
fdf1e8c
test(tdxlab): preflight Docker daemon
kvinwang
committed
9a6d69f
test(integration): model Cloudflare zone discovery
kvinwang
committed
e4f4a19
test(tdxlab): prepare user namespaces
kvinwang
committed
f86044e
test(integration): bridge legacy Gateway contracts
kvinwang
committed
8755b93
test: fix mixed-version gateway failover harness
kvinwang
committed
e21a02a
test: select live KMS for failover preparation
kvinwang
committed
adb4e66
test: prepare identity matrix alternate image
kvinwang
committed
c275f94
test: remove unused collateral prerequisite
kvinwang
committed
ba06453
test: restore PCCS collateral lifecycle matrix
kvinwang
committed
525e67b
test: cover guest configuration entry matrix
kvinwang
committed
63d3f40
test: update KMS compatibility certificate config
kvinwang
committed
bc2a87a
test: restore KMS provider failover matrix
kvinwang
committed
db52b2a
test: restore gateway registration failover matrix
kvinwang
committed
b2f4558
test: follow split VMM restart policy tests
kvinwang
committed
c426ec5
test: resolve Cargo for gateway refresh harness
kvinwang
committed
68301b5
test: align VMM QEMU platform matrix
kvinwang
committed
917d692
test: follow current VMM networking contract
kvinwang
committed
f160651
test: shorten VMM networking runtime paths
kvinwang
committed
9d15dc3
test: start bridge VM before launch inspection
kvinwang
committed
bb4bc0a
test: prepare VMM hugepage prerequisites
kvinwang
committed
3121cf0
test: exercise VMM hugepage lifecycle
kvinwang
committed
d246c26
test: explicitly start user network VM
kvinwang
committed
ef7eca8
test: detach networking case supervisor
kvinwang
committed
c7c9087
test: preserve VMM placement command evidence
kvinwang
committed
a752d92
test: inspect supervised QEMU launch spec
kvinwang
committed
77bffd6
test: follow attestation suite growth
kvinwang
committed
89b888b
test: follow current mock attestation CLI
kvinwang
committed
783271c
test: require both cloud quote matrices
kvinwang
committed
e7ee5cd
test: replace removed verifier matrix selectors
kvinwang
committed
2cebf53
test: align verifier coverage with current suites
kvinwang
committed
9dcb86d
test: prepare isolated Docker subnet pool
kvinwang
committed
88a8b08
test: preserve CAA concurrency diagnostics
kvinwang
committed
d49886e
test: follow Gateway CAA operation locking
kvinwang
committed
f51cabe
test: restore current Certbot and auth regressions
kvinwang
committed
66e30d6
test: follow current Gateway unit matrices
kvinwang
committed
502d36e
test: follow current Gateway port-policy matrix
kvinwang
committed
d0e1f4d
test: make Gateway DNS routing fixture deterministic
kvinwang
committed
e6cd898
test: follow removed KMS certificate-log surface
kvinwang
committed
f802525
test: execute current KMS binary test target
kvinwang
committed
026db2e
test: prepare seed-matched guest compatibility evidence
kvinwang
committed
0ba6c17
test: cover KMS signatures and injected Gateway outages
kvinwang
committed
c066b28
test: select prepared TDX simulator explicitly
kvinwang
committed
3fffc50
test: run compatibility evidence without hardware TDX
kvinwang
committed
7bad63f
test: follow verifier certificate profile ownership
kvinwang
committed
f5a9851
build: record verifier test dependency
kvinwang
committed
e335d7a
test: prepare lease-owned attestation VMM
kvinwang
committed
3721fdc
test: separate physical and simulator collateral
kvinwang
committed
6865037
test: observe app identity during Gateway outage
kvinwang
committed
f1c3368
test: separate Gateway boot and registration probes
kvinwang
committed
2dc46f9
test: exercise Gateway identity fallback
kvinwang
committed
4e8ce94
test: decouple identity probe from Gateway cache
kvinwang
committed
2328d91
test: allow clients without Gateway endpoints
kvinwang
committed
20ed724
test: run guest compatibility on physical TDX
kvinwang
committed
6e295d4
test: prepare physical compatibility collateral
kvinwang
committed
79050d0
test(verifier): avoid fixed cc-eventlog test count
kvinwang
committed
f40e787
test: prepare simulator collateral before guest boot
kvinwang
committed
9af59b1
test: prepare simulated identity image variant
kvinwang
committed
f1ab8d1
test(simulator): restore SEV-SNP ABI regression coverage
kvinwang
committed
48106f7
test(kms): prepare nested contract dependencies
kvinwang
committed
19203b9
test(kms): probe event audit contract fixtures
kvinwang
committed
b1feb20
test(kms): probe runtime contract fixtures
kvinwang
committed
5c516f0
test(guest): wait for bind conflict cleanup
kvinwang
committed
4fbac6d
test(gateway): synchronize concurrent renewal requests
kvinwang
committed
cdc87ba
test(guest): cancel bind conflict restart jobs
kvinwang
committed
c57aa10
test(gateway): prepare allocation wireguard fixture
kvinwang
committed
43a0778
test(gateway): establish distributed renewal contention
kvinwang
committed
5b175bd
test(gateway): isolate allocation recycle phase
kvinwang
committed
94c2b5f
test(integration): retry rolling KMS metadata probes
kvinwang
committed
802565d
test(platform): wait for sealing provider recovery
kvinwang
committed
edeb90f
test(harness): probe lifecycle readiness deterministically
kvinwang
committed
476267b
test(gateway): align allocation and renewal invariants
kvinwang
committed
15ea758
test(integration): await bounded KMS boot failure
kvinwang
committed
dbbcb90
test(gateway): recheck distributed renewal freshness
kvinwang
committed
39dad3a
test(provider): retry transient sealing startup
kvinwang
committed
2bea72d
test(harness): harden runtime readiness probes
kvinwang
committed
2a2d465
test(vmm): probe the browser endpoint directly
kvinwang
committed
8d8e77a
test(plan): cover post-baseline merged regressions
kvinwang
committed
4d98882
test(plan): refresh post-merge harness expectations
kvinwang
committed
60418e6
test(plan): align ACPI measurement matrix
kvinwang
committed
0d19990
test(plan): harden dependency-backed harnesses
kvinwang
committed
59f7de6
test(plan): run prepared Playwright offline
kvinwang
committed
260691d
test(plan): make UI browser execution deterministic
kvinwang
committed
a757461
test(plan): preserve expected stargz failures
kvinwang
committed
77da0a1
test(plan): unmount stale stargz snapshots
kvinwang
committed
6d63aaf
test(plan): use persistent stargz storage
kvinwang
committed
e703e42
test(plan): wait for stargz unmounts
kvinwang
committed
c87e77f
test(plan): preserve concurrent pull failures
kvinwang
committed
fb2af5a
test(plan): deterministically corrupt stargz layer
kvinwang
committed
52c5b7d
test(plan): accept truncated stargz diagnostics
kvinwang
committed
9526f18
test(plan): assert corrupt stargz rejection by status
kvinwang
committed
2810d2b
test(plan): assert stargz outages by status
kvinwang
committed
0fcd4bd
test(plan): force remote stargz corruption path
kvinwang
committed
062f481
test(plan): zero corrupt stargz layer
kvinwang
committed
ec7e0cc
test(plan): clear stargz cache before corruption
kvinwang
committed
f687c17
test(plan): restart registry after layer corruption
kvinwang
committed
a5f54d1