more audit work

src/__Libraries/__Tests/StellaOps.Provenance.Tests/AGENTS.md

@@ -0,0 +1,30 @@
+# StellaOps.Provenance.Tests - Local Agent Charter
+
+## Roles
+- Backend developer
+- QA automation engineer
+
+## Working directory
+- src/__Libraries/__Tests/StellaOps.Provenance.Tests
+
+## Allowed dependencies
+- src/__Libraries/StellaOps.Provenance
+- src/__Libraries/StellaOps.TestKit
+
+## Required reading
+- docs/README.md
+- docs/07_HIGH_LEVEL_ARCHITECTURE.md
+- docs/modules/platform/architecture-overview.md
+- docs/modules/provenance/README.md
+- docs/modules/provenance/architecture.md
+- docs/modules/provenance/guides/provenance-attestation.md
+
+## Determinism and test rules
+- Use deterministic inputs; avoid DateTime.UtcNow, DateTimeOffset.UtcNow, Guid.NewGuid, and Random.Shared in tests.
+- Use TimeProvider and fixed seeds or fixtures for time- and randomness-dependent tests.
+- Use CultureInfo.InvariantCulture for parsing and formatting in tests.
+- Tag tests with TestCategories (Unit, Integration, Performance) and keep integration tests out of unit-only runs.
+
+## Quality and safety
+- ASCII-only strings and comments unless explicitly justified.
+- Keep fixtures small and deterministic; clean up temp resources.

src/__Libraries/__Tests/StellaOps.Provenance.Tests/ProvenanceExtensionsTests.cs

@@ -58,7 +58,7 @@ public sealed class ProvenanceExtensionsTests
 
         var provenanceDoc = (DocumentObject)((DocumentObject)document["provenance"])["dsse"];
         Assert.Equal("sha256:deadbeef", ((DocumentString)provenanceDoc["envelopeDigest"]).Value);
-        Assert.Equal(123, ((DocumentInt64)((DocumentObject)provenanceDoc["rekor"])["logIndex"]).Value);
+        Assert.Equal(123L, ((DocumentInt64)((DocumentObject)provenanceDoc["rekor"])["logIndex"]).Value);
         Assert.Equal("att:build#1", ((DocumentString)((DocumentObject)((DocumentArray)provenanceDoc["chain"])[0])["id"]).Value);
 
         var trustDoc = (DocumentObject)document["trust"];

src/__Libraries/__Tests/StellaOps.Provenance.Tests/TASKS.md

@@ -0,0 +1,10 @@
+# StellaOps.Provenance.Tests Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0033-M | DONE | Revalidated 2026-01-08; open findings tracked in audit report. |
+| AUDIT-0033-T | DONE | Revalidated 2026-01-08; open findings tracked in audit report. |
+| AUDIT-0033-A | DONE | Waived (test project; revalidated 2026-01-08). |