more features checks. setup improvements

2026-02-13 02:04:55 +02:00
parent 9911b7d73c
commit 9ca2de05df
675 changed files with 37550 additions and 1826 deletions
--- a/docs/qa/feature-checks/runs/policy/policy-bundles-with-proof-objects/run-002/tier2-integration-check.json
+++ b/docs/qa/feature-checks/runs/policy/policy-bundles-with-proof-objects/run-002/tier2-integration-check.json
@@ -0,0 +1,96 @@
+{
+    "type": "integration",
+    "capturedAtUtc": "2026-02-13T00:32:00Z",
+    "testCommand": "dotnet test src/Policy/__Tests/StellaOps.Policy.Tests/StellaOps.Policy.Tests.csproj --no-restore -v normal && dotnet test src/Policy/__Tests/StellaOps.Policy.Engine.Tests/StellaOps.Policy.Engine.Tests.csproj --no-restore -v normal",
+    "testFilter": "FullyQualifiedName~TrustLattice|FullyQualifiedName~ClaimScoreMerger|FullyQualifiedName~K4Lattice|FullyQualifiedName~PolicyBundle|FullyQualifiedName~PolicyGate (Policy.Tests + Engine.Tests)",
+    "testsRun": 2059,
+    "testsPassed": 2059,
+    "testsFailed": 0,
+    "targetedTestMethods": [
+        "K4LatticeTests.Join_UnknownWithUnknown_ReturnsUnknown",
+        "K4LatticeTests.Join_TrueWithFalse_ReturnsConflict",
+        "K4LatticeTests.Join_ConflictWithAny_ReturnsConflict",
+        "K4LatticeTests.Join_IsCommutative",
+        "K4LatticeTests.Join_IsAssociative",
+        "K4LatticeTests.JoinAll_MultipleValues_ReturnsJoin",
+        "K4LatticeTests.Meet_TrueWithFalse_ReturnsUnknown",
+        "K4LatticeTests.Meet_IsCommutative",
+        "K4LatticeTests.LessOrEqual_IsReflexive",
+        "K4LatticeTests.LessOrEqual_IsTransitive",
+        "K4LatticeTests.FromSupport_BothSupports_ReturnsConflict",
+        "K4LatticeTests.Negate_IsInvolutive",
+        "ClaimScoreMergerTests.Merge_SelectsHighestScore",
+        "ClaimScoreMergerTests.Merge_AppliesConflictPenalty",
+        "ClaimScoreMergerTests.Merge_IsDeterministic",
+        "ClaimScoreMergerPropertyTests.Merge_EmptyClaims_ReturnsUnderInvestigation",
+        "TrustLatticeEngineIntegrationTests.VendorVsScannerConflict_DetectsConflict",
+        "TrustLatticeEngineIntegrationTests.VendorVsScannerConflict_ProofBundleCapturesEvidence",
+        "TrustLatticeEngineIntegrationTests.AllSourcesAgree_Exploitable_Disposition",
+        "TrustLatticeEngineIntegrationTests.Fixed_Overrides_Exploitability",
+        "TrustLatticeEngineIntegrationTests.Misattributed_Produces_FalsePositive",
+        "TrustLatticeEngineIntegrationTests.NotReachable_Produces_NotAffected",
+        "TrustLatticeEngineIntegrationTests.Mitigated_Produces_NotAffected",
+        "TrustLatticeEngineIntegrationTests.InsufficientData_Produces_InTriage",
+        "TrustLatticeEngineIntegrationTests.MultipleSubjects_EvaluatesAll",
+        "TrustLatticeEngineIntegrationTests.ProofBundle_ContentAddressable",
+        "TrustLatticeEngineIntegrationTests.DecisionTrace_ContainsAllEvaluatedRules",
+        "TrustLatticeEngineIntegrationTests.DecisionTrace_FirstMatchWins",
+        "TrustLatticeEngineIntegrationTests.Stats_ReflectStoreState",
+        "TrustLatticeEngineIntegrationTests.Clear_ResetsEngine",
+        "LatticeStoreTests.IngestClaim_ComputesContentAddressableId",
+        "LatticeStoreTests.ConflictingAssertions_ReturnsConflict",
+        "LatticeStoreTests.GetConflictingSubjects_ReturnsConflicts",
+        "LatticeStoreTests.SubjectState_ToSnapshot_CapturesAllAtoms",
+        "VexNormalizerTests.CycloneDx_Affected_SetsPresent_And_Applies_True",
+        "VexNormalizerTests.OpenVex_Affected_SetsPresent_And_Applies_True",
+        "VexNormalizerTests.Csaf_KnownAffected_SetsPresent_And_Applies_True",
+        "PolicyGatesTests.MinimumConfidenceGate_FailsBelowThreshold",
+        "PolicyGatesTests.UnknownsBudgetGate_FailsWhenBudgetExceeded",
+        "PolicyGatesTests.SourceQuotaGate_FailsWithoutCorroboration",
+        "PolicyGatesTests.ReachabilityRequirementGate_FailsWithoutProof",
+        "PolicyGateRegistryTests.Registry_StopsOnFirstFailure",
+        "PolicyGateRegistryTests.Registry_CollectsAllWhenConfigured",
+        "PolicyBundleServiceTests.CompileAndStoreAsync_SucceedsAndStoresBundle",
+        "PolicyBundleServiceTests.CompileAndStoreAsync_FailsWithBadSyntax",
+        "PolicyBundleServiceTests.CompileAndStoreAsync_ReturnsAocMetadata",
+        "PolicyBundleServiceTests.CompileAndStoreAsync_IncludesProvenanceWhenProvided",
+        "PolicyBundleServiceTests.CompileAndStoreAsync_NullAocMetadataOnFailure",
+        "PolicyBundleServiceTests.CompileAndStoreAsync_SourceDigestIsDeterministic"
+    ],
+    "behaviorVerified": [
+        "K4 four-valued logic algebra: Join (T join F = Conflict), Meet (T meet F = Unknown), Negate, LessOrEqual",
+        "K4 algebraic properties: commutativity, associativity, reflexivity, transitivity, involutive negation",
+        "FromSupport converts evidence support to K4 value",
+        "ClaimScoreMerger selects highest score with deterministic merge ordering",
+        "Conflict penalty of 0.25 applied when conflicting claims exist",
+        "1000-iteration determinism test for ClaimScoreMerger",
+        "Empty claims returns UnderInvestigation disposition",
+        "TrustLatticeEngine pipeline: VEX normalization -> claim ingestion -> K4 evaluation -> disposition selection -> proof bundle generation",
+        "Vendor vs Scanner conflict detection with K4 Conflict value",
+        "Proof bundle captures all evidence including claims with scores",
+        "Content-addressable proof bundles",
+        "Multiple subjects evaluated in single lattice engine call",
+        "Decision trace contains all evaluated rules with first-match-wins semantics",
+        "VEX normalization for CycloneDX, OpenVEX, and CSAF formats",
+        "LatticeStore content-addressable claim IDs and conflict tracking",
+        "PolicyGate evaluation: MinimumConfidence, UnknownsBudget, SourceQuota, ReachabilityRequirement",
+        "PolicyGateRegistry stop-on-first-failure and collect-all modes",
+        "PolicyBundleService compile and store with deterministic source digest",
+        "Provenance metadata included in policy bundles"
+    ],
+    "assertionTypes": [
+        "algebraic-property-verification",
+        "determinism-verification",
+        "content-addressability",
+        "pipeline-end-to-end",
+        "conflict-detection",
+        "vex-normalization",
+        "gate-evaluation",
+        "proof-bundle-completeness",
+        "disposition-selection"
+    ],
+    "newTestsWritten": [],
+    "bugsFixed": [],
+    "rawOutput": "Policy.Tests: Passed! - Failed: 0, Passed: 781, Skipped: 0, Total: 781, Duration: 3s 450ms; Engine.Tests: Passed! - Failed: 0, Passed: 1278, Skipped: 0, Total: 1278, Duration: 7s 799ms",
+    "verdict": "pass"
+}