feat: supercharge verify-commit tests; delete dead provenance_payload_v1
- Delete provenance_payload_v1 (dead code — never called anywhere) - Delete PROVENANCE_PAYLOAD_VERSION constant (redundant with the payload prefix) - Clean up provenance_payload docstring (remove v1/v2 comparison language) - Expand test_cmd_verify_commit: 25 → 65 tests across 9 classes * Unit: _resolve_ref (HEAD, sha256: passthrough, branch name, missing) * Unit: _verify_one (format_version<7 skip, committed_at tamper, model_id tamper, wrong keypair, unknown pubkey algo, signed_at field, error=None) * Unit: _fetch_key_status (active, revoked, unknown, network error, timeout, bad JSON) * Integration: text OK/BAD/ERR lines, unsigned signer, key= present/absent, short_id in output, error field stripped from JSON, signed_at non-empty, batch ordering preserved, branch name ref, nonexistent ref → USER_ERROR * Security: null byte, path traversal, bare hex (with sha256: hint to stderr) * Data integrity: committed_at/model_id tamper via CLI, wrong keypair via CLI * Stress: 50-commit batch, 10 different keys, key_status_cache N→1 call
0 comments
muse hub commit comment sha256:51640b33b9dfc7bcf2d151f3663737dbb6486d56e6201f064884fc5a82106be0 --body "your comment"
No comments yet. Be the first to start the discussion.