Add determinism tests for verdict artifact generation and update SHA256 sums script

- Implemented comprehensive tests for verdict artifact generation to ensure deterministic outputs across various scenarios, including identical inputs, parallel execution, and change ordering.
- Created helper methods for generating sample verdict inputs and computing canonical hashes.
- Added tests to validate the stability of canonical hashes, proof spine ordering, and summary statistics.
- Introduced a new PowerShell script to update SHA256 sums for files, ensuring accurate hash generation and file integrity checks.
This commit is contained in:
StellaOps Bot
2025-12-24 02:17:34 +02:00
parent e59921374e
commit 7503c19b8f
390 changed files with 37389 additions and 5380 deletions

View File

@@ -1,4 +1,4 @@
# Hash index for authority gap artefacts (AU1AU10, RR1RR10)
# Hash index for authority gap artefacts (AU1–AU10, RR1–RR10)
# Append lines: "<sha256> <relative-path>"
2e07c639a8fa60105e42965c5a92657e66f6255c9aa375bfacc413083e1f36a3 docs/modules/authority/gaps/artifacts/authority-abac.schema.json
d0721d49b74f648ad07fe7f77fabc126fe292db515700df5036f1e1324a00025 docs/modules/authority/gaps/artifacts/authority-jwks-metadata.schema.json
@@ -14,5 +14,5 @@ d0721d49b74f648ad07fe7f77fabc126fe292db515700df5036f1e1324a00025 docs/modules/a
39494b4452095b0229399ca2e03865ece2782318555b32616f8d758396cf55ab docs/modules/authority/gaps/authority-conformance-tests.md
285f9b117254242c8eb32014597e2d7be7106c332d97561c6b3c3f6ec7c6eee7 docs/modules/authority/gaps/authority-delegation-quotas.md
1a77f02f28fafb5ddb5c8bf514001bc3426d532ee7c3a2ffd4ecfa3d84e6036e docs/modules/authority/gaps/rekor-receipt-error-taxonomy.md
97405eabf4a5e54937c44a4714f6c76803a55a18924b8f5b841a73c19feed4a5 docs/console/observability.md
c65f72e22ea8d482d2484ec5b826e4cecfabf75f88c1c7031b8190ecbc9b80fa docs/console/forensics.md
f4330a13d9991ebf29a6dca963c2219b14140c6e29d09031b276fb33c3f872be docs/console/observability.md
71fcee6f13b1fa339b5de6963833a65a94a32eda24982e8bca1e7906fa92be19 docs/console/forensics.md

View File

@@ -6,11 +6,11 @@ e9e26fe469e221ee6c3255f5c450dc9f0f8cc43b2ae55285e859f28cec62d375 docs/modules/a
1d77b324726f07712ec8a5276b2c187a3ebfa1ce888481e941b428e5aadaf310 docs/modules/authority/gaps/dev-smoke/2025-12-05/rekor-receipt-bundle.sigstore.json
81dfe543442831f7bfeec480d5937594590a15b3400ae3567d7d96e62c06ed44 docs/modules/authority/gaps/dev-smoke/2025-12-05/rekor-receipt-policy.sigstore.json
96316e53ca5885689870c69719778c2685f191bee844003cb170333fb91579e1 docs/modules/authority/gaps/dev-smoke/2025-12-05/rekor-receipt.schema.sigstore.json
0d14597c3685d3b9c87626e4fef92c6e18ce9d110d1e019ac3de3592c2be0732 authority-abac.schema.sigstore.json
3b6a92f8d650b2ea3afc56d2c63830f0ec4f5f215ee1b361936553788b40ac45 authority-jwks-metadata.schema.sigstore.json
7c2888a1f810dd35c9feb0f119aff1fb0f6e11338ca55bbfa8c68bb195c6dbe9 authority-offline-verifier-bundle.sigstore.json
3df91f1fb62a1e96b2c9fb7a200983a50f4bdc584e555189c9944bcb74851fd6 authority-scope-role-catalog.sigstore.json
192d7ae0e5213fc6c4572d7edc6b2adc4392930a42c8fd54c9ff619a5c7c5573 crypto-profile-registry.sigstore.json
59f812e76af748c6636a5e8a3b2fe6dc5a92a6a83aa49dc010042dfcfaa52de3 rekor-receipt-bundle.sigstore.json
9b5fdf26e452fcbfcff03359652f8f2e457d594c70f1a3fe7d20c80674701810 rekor-receipt-policy.sigstore.json
f6dfa58a44a364d5e7dff6681d85bb9892a0cba8652e4bb0af4fecfaccc2b003 rekor-receipt.schema.sigstore.json
283a65b605edc222a8e58f148b3797af3c14c33fc928964f946c77312a802545 authority-abac.schema.sigstore.json
cfea834c83ab3ddfcd4863824bbebfcb98578278850a906fce2f535c892c81ad authority-jwks-metadata.schema.sigstore.json
e9e26fe469e221ee6c3255f5c450dc9f0f8cc43b2ae55285e859f28cec62d375 authority-offline-verifier-bundle.sigstore.json
1c1188af6190438c2485a0e4193a9a8b778bd69a35b743da73ee891357192966 authority-scope-role-catalog.sigstore.json
54b4288882bcd93a00d656a0d8ddb256e407096c76ab44f5137956a76ac38c05 crypto-profile-registry.sigstore.json
1d77b324726f07712ec8a5276b2c187a3ebfa1ce888481e941b428e5aadaf310 rekor-receipt-bundle.sigstore.json
81dfe543442831f7bfeec480d5937594590a15b3400ae3567d7d96e62c06ed44 rekor-receipt-policy.sigstore.json
96316e53ca5885689870c69719778c2685f191bee844003cb170333fb91579e1 rekor-receipt.schema.sigstore.json