version: 1
source_advisory: "docs/product-advisories/22-Dec-2026 - Better testing strategy.md"

models:
  L0:
    description: "Library/Core"
    required: [unit, property, snapshot, determinism]
  S1:
    description: "Storage/Postgres"
    required: [integration_postgres, migrations, idempotency, concurrency, query_ordering]
  T1:
    description: "Transport/Queue"
    required: [protocol_roundtrip, fuzz_invalid, delivery_semantics, backpressure]
  C1:
    description: "Connector/External"
    required: [fixtures, snapshot, resilience, security]
    optional: [live_smoke]
  W1:
    description: "WebService/API"
    required: [contract, authz, otel, negative]
  WK1:
    description: "Worker/Indexer"
    required: [end_to_end, retries, idempotency, otel]
  AN1:
    description: "Analyzer/SourceGen"
    required: [diagnostics, codefixes, golden_generated]
  CLI1:
    description: "Tool/CLI"
    required: [exit_codes, golden_output, determinism]
  PERF:
    description: "Benchmarks"
    required: [benchmark, perf_smoke, regression_thresholds]

lanes:
  Unit: [unit, property, snapshot, determinism]
  Contract: [contract, schema]
  Integration: [integration_postgres, integration_services, end_to_end]
  Security: [security, authz, negative]
  Performance: [benchmark, perf_smoke]
  Live: [live_smoke]

modules:
  Scanner:
    models: [L0, AN1, S1, T1, W1, WK1, PERF]
    gates: [determinism, reachability_evidence, proof_spine]
  Concelier:
    models: [C1, L0, S1, W1, AN1]
    gates: [fixture_coverage, normalization_determinism, no_lattice_dependency]
  Excititor:
    models: [C1, L0, S1, W1, WK1]
    gates: [preserve_prune_source, format_snapshots, no_lattice_dependency]
  Policy:
    models: [L0, S1, W1]
    gates: [unknown_budget, verdict_snapshot]
  Authority:
    models: [L0, W1, C1]
    gates: [scope_enforcement, sign_verify]
  Signer:
    models: [L0, W1, C1]
    gates: [canonical_payloads, sign_verify]
  Attestor:
    models: [L0, W1]
    gates: [rekor_receipts, dsse_verify]
  Scheduler:
    models: [L0, S1, W1, WK1]
    gates: [idempotent_jobs, retry_backoff]
  Notify:
    models: [L0, C1, S1, W1, WK1]
    gates: [connector_snapshots, retry_semantics]
  CLI:
    models: [CLI1]
    gates: [exit_codes, stdout_snapshots]
  UI:
    models: [W1]
    gates: [contract_snapshots, e2e_smoke]