chore: establish local platform baseline

2026-08-26 06:41:54 +08:00
commit 29bdf4900f
575 changed files with 95644 additions and 0 deletions
@@ -0,0 +1,77 @@
+package infrastructureconformance
+
+import (
+	"encoding/json"
+	"strings"
+	"testing"
+	"time"
+)
+
+func TestProductionInfrastructureCompleteCoveragePasses(t *testing.T) {
+	t.Parallel()
+	capture := infrastructureFixture("PRODUCTION")
+	report := Evaluate(capture, capture.CandidateVersion, capture.BuildDigest, time.Date(2026, 8, 25, 12, 0, 0, 0, time.UTC))
+	if report.Result != "PASS" || report.EvidenceScope != "PRODUCTION_INFRASTRUCTURE" || report.ExternalValidationRequired {
+		t.Fatalf("unexpected report: %+v", report)
+	}
+	if len(report.VerifiedComponents) != len(RequiredComponents) {
+		t.Fatalf("expected all components, got %v", report.VerifiedComponents)
+	}
+}
+
+func TestProductionInfrastructureMissingControlFails(t *testing.T) {
+	t.Parallel()
+	capture := infrastructureFixture("PRODUCTION")
+	capture.Components[2].VerifiedControls = capture.Components[2].VerifiedControls[:1]
+	report := Evaluate(capture, capture.CandidateVersion, capture.BuildDigest, time.Now())
+	if report.Result != "FAIL" || !report.ExternalValidationRequired {
+		t.Fatalf("expected failed production report, got %+v", report)
+	}
+}
+
+func TestLocalInfrastructurePassesWithoutExternalReleaseCredit(t *testing.T) {
+	t.Parallel()
+	capture := infrastructureFixture("LOCAL")
+	capture.Components = capture.Components[:3]
+	for position := range capture.Components {
+		capture.Components[position].VerifiedControls = []string{"LOCAL_REACHABLE"}
+	}
+	report := Evaluate(capture, capture.CandidateVersion, capture.BuildDigest, time.Now())
+	if report.Result != "PASS" || report.EvidenceScope != "LOCAL_INFRASTRUCTURE" || !report.ExternalValidationRequired {
+		t.Fatalf("unexpected local report: %+v", report)
+	}
+}
+
+func TestParseCaptureRejectsUnknownFields(t *testing.T) {
+	t.Parallel()
+	content, err := json.Marshal(infrastructureFixture("LOCAL"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	content = []byte(strings.TrimSuffix(string(content), "}") + `,"unexpected":true}`)
+	if _, err = ParseCapture(content); err == nil {
+		t.Fatal("expected unknown field rejection")
+	}
+}
+
+func infrastructureFixture(source string) Capture {
+	observedAt := time.Date(2026, 8, 25, 11, 0, 0, 0, time.UTC)
+	collectedAt := observedAt.Add(time.Hour)
+	environment := "STAGING"
+	regionRef, clusterRef, changeRef := "cn-region-a", "cluster-a", "change-20260825"
+	if source == "LOCAL" {
+		environment, regionRef, clusterRef, changeRef = "LOCAL", "local-machine", "compose", "local-smoke"
+	}
+	components := make([]ComponentEvidence, 0, len(RequiredComponents))
+	for _, componentType := range RequiredComponents {
+		components = append(components, ComponentEvidence{
+			ComponentType: componentType, ResourceRef: strings.ToLower(componentType) + "-resource", Status: "VERIFIED", ObservedAt: observedAt,
+			VerifiedControls: RequiredControls(componentType), ProbeRef: "probe:" + componentType, ConfigurationRef: "config:" + componentType, AuditRef: "audit:" + componentType,
+		})
+	}
+	return Capture{
+		SchemaVersion: CaptureSchema, EvidenceSource: source, CandidateVersion: "0.63.0-rc.1", BuildDigest: "sha256:" + strings.Repeat("a", 64),
+		Environment: environment, RegionRef: regionRef, ClusterRef: clusterRef, ChangeTicketRef: changeRef,
+		AttestedByRef: "platform-reviewer", AttestedAt: observedAt.Add(30 * time.Minute), CollectedAt: collectedAt, Components: components,
+	}
+}