test: add colocated core component acceptance suite - #841

Open

kvinwang wants to merge 218 commits into

nextfrom

codex/core-components-test-infrastructure

Commits on Aug 25, 2026

test(infrastructure): add deterministic component harnesses
kvinwang
committed
46a9f1a
test(plan): define core component acceptance coverage
kvinwang
committed
8039bbb
test(results): promote verified component coverage
kvinwang
committed
d3514fe
docs(testing): account for split product commits
kvinwang
committed
ad558d5
docs(testing): record product PR split audit
kvinwang
committed
f1d4d91
docs(testing): account for simulator PR split
kvinwang
committed
cca2575
docs(testing): retain merged PRs in split inventory
kvinwang
committed
b7844cf
test(simulator): enforce configured TPM node ownership
kvinwang
committed
c6b48c4
docs(testing): account for TPM ownership correction
kvinwang
committed
804d68e
Revert "test(simulator): enforce configured TPM node ownership"
kvinwang
committed
9fb4610
docs(testing): reject TPM node race tolerance
kvinwang
committed
70ebe2f
docs(testing): add simulator retest watchlist
kvinwang
committed
708d291
test(gateway): use existing health and dashboard routes
kvinwang
committed
7f2571e
test(verifier): assert simulator trust-root isolation
kvinwang
committed
f4046b2
test(verifier): validate embedded cache versions
kvinwang
committed
4791e9b
docs(testing): align rewritten PR accounting
kvinwang
committed
1d8282f
test(guest): validate normal swap boot lifecycle
kvinwang
committed
a42c047
docs(testing): record closed supervisor socket PR
kvinwang
committed
246668f
test(supervisor): validate UDS auto-start lifecycle
kvinwang
committed
e7c62ed
test(util): validate certificate outputs independently
kvinwang
committed
ee45a04
test(supervisor): separate client lifecycle coverage
kvinwang
committed
297821f
test(gateway): drop DNS credential encryption assumptions
kvinwang
committed
81e45aa
test(gateway): cover app-address DNS failover
kvinwang
committed
12e161f
test(guest): pin wg-checker timing to a uniform 10s clock
kvinwang
committed
23cb480
test(vmm): cover filesystem-only CID reload
kvinwang
committed
1bda1d2
test(gateway): register upgrade domain through admin API
kvinwang
committed
17a1234
test(gateway): provision upgrade domain through certbot
kvinwang
committed
18728bc
test(vmm): preserve stopped VM CID on reload
kvinwang
committed
cea8a1c
test(guest): retarget tc-gos-observabil-003 at the gateway checker
kvinwang
committed
9ca6c9e
test(gateway): cover ACME credential rotation
kvinwang
committed
fd0ed30
test(kms): cover CA persistence and renewal
kvinwang
committed
0f72316
test(vmm): retarget tc-vmm-serial-006 at log rotation
kvinwang
committed
1bddddc
test(vmm): cover libvirt network filter lifecycle
kvinwang
committed
be33592
test(vmm): wait for restarted netd listener
kvinwang
committed
d9506f4
test(vmm): avoid destructive netd readiness probe
kvinwang
committed
e8a3d5c
test(vmm): read generated NIC MACs from launch plan
kvinwang
committed
11b7a1f
test(vmm): isolate secondary host API port
kvinwang
committed
0ac39f8
test(vmm): inject spoof traffic on the host interface
kvinwang
committed
58d8aee
test(vmm): preserve failure evidence and force cleanup
kvinwang
committed
827a296
test(vmm): verify filtered network survives QEMU restart
kvinwang
committed
4032689
test: follow current guest and VMM configuration
kvinwang
committed
68f4747
test(runner): retain sweep failure diagnostics
kvinwang
committed
2a69862
test(tdxlab): prepare deterministic run prerequisites
kvinwang
committed
3f92d6c
test(tdxlab): provision pinned Foundry tools
kvinwang
committed
87b2aff
test(kms): resolve prepared startup binary
kvinwang
committed
18d10b9
test(tdxlab): resolve user toolchain paths
kvinwang
committed
bddb328
test(kms): accept canonical empty Finish response
kvinwang
committed
979bd9d
test(tdxlab): document prepared execution path
kvinwang
committed
9c71e45
test(runner): fail sweeps with nonpassing cases
kvinwang
committed
ef1bebf
test(gateway): follow current debug config
kvinwang
committed
889d6ad
test(attestation): prepare legacy TDX image verification
kvinwang
committed
14d6fb7
test(attestation): refresh NitroTPM replay fixture
kvinwang
committed
c8872a3
test(guest): retain gateway checker failure context
kvinwang
committed
8dd9663
test(tdxlab): build candidate guest prerequisites
kvinwang
committed
5964306
test(tdxlab): build images from a clean worktree
kvinwang
committed
f12df83
test(tdxlab): discover flavor-specific mkosi outputs
kvinwang
committed
668e1b6
test(gateway): follow current public RPC route
kvinwang
committed
9e2a40d
test(tdxlab): prepare current GCP TPM replay
kvinwang
committed
925ebdf
test(guest): capture gateway checker exit codes safely
kvinwang
committed
c44bae7
test(mkosi): prepare ephemeral OpenSSH host keys
kvinwang
committed
67990f4
test(guest): use deterministic quote output fault
kvinwang
committed
363e2e9
test(guest): use deterministic app-key output fault
kvinwang
committed
2252fe5
test(guest): follow atomic random output replacement
kvinwang
committed
0e2dbf3
test(guest): use deterministic attestation output fault
kvinwang
committed
ae4ed64
test(guest): use deterministic get-keys output fault
kvinwang
committed
3b36bd3
test(simulator): prepare platform replay fixtures
kvinwang
committed
fdf2f9a
test(gateway): follow current RPC response contracts
kvinwang
committed
ac3b28d
test(kms): accept current Empty JSON encoding
kvinwang
committed
cbbd454
test(kms): follow cloned shutdown handle
kvinwang
committed
de1db3f
test(verifier): follow certificate profile validation
kvinwang
committed
d898776
test(verifier): use a valid oneshot config port
kvinwang
committed
236f5e8
test(vmm): follow missing log response contract
kvinwang
committed
eabfa7c
test(vmm): materialize mutable image fixtures
kvinwang
committed
b1b6468
test(kms): follow current root-key handover
kvinwang
committed
ef8bb69
test(gateway): isolate fixture WireGuard subnets
kvinwang
committed
c7e6263
test(gateway): follow current public info route
kvinwang
committed
6c9f9c0
test(gateway): accept current Empty exit response
kvinwang
committed
2b6e067
test(gateway): verify malformed Empty framing
kvinwang
committed
7ebc614
test(gateway): follow current debug configuration
kvinwang
committed
0e64ecc
test(gateway): follow on-demand TLS key generation
kvinwang
committed
7dea5ed
test(gateway): edit prepared TLS paths by section
kvinwang
committed
57eec9a
test(gateway): accept current DNS Empty responses
kvinwang
committed
f82cfac
test(gateway): follow current certificate store suite
kvinwang
committed
1c8f341
test(vmm): follow private CID state contract
kvinwang
committed
7d54fc4
test(vmm): stage reload fixtures across filesystems
kvinwang
committed
5a8b911
test(vmm): prepare management port for config checks
kvinwang
committed
74d15d8
test(vmm): follow current UI RPC diagnostics
kvinwang
committed
3bf3f3c
test(vmm): follow current internal source matrices
kvinwang
committed
bac80a3
test(guest): prepare a shell-capable log fixture image
kvinwang
committed
195fb44
test(guest): capture log fixture preparation diagnostics
kvinwang
committed
9bd582d
test(tdxlab): prepare dashboard log workload image
kvinwang
committed
cbf3c4e
test(tdxlab): bind dashboard preparation to case identity
kvinwang
committed
e6b8487
test(kms): prepare finalized Ethereum head
kvinwang
committed
357674a
test(integration): follow current gateway admin contract
kvinwang
committed
998c949
test(tdxlab): preserve guest image integrity
kvinwang
committed
781b322
test(integration): bound gateway DNS fixture waits
kvinwang
committed
6b11cd1
test(integration): accept compatible Exit request evolution
kvinwang
committed
895faa9
style(test): format integration matrix
kvinwang
committed
97fde28
test(integration): use mock DNS listener port
kvinwang
committed
48d08e8
test(fixtures): bind cleanup to prepared state root
kvinwang
committed
11020ee
test(integration): pin mock DNS zone
kvinwang
committed
e0b732e
test(tdxlab): preflight Docker daemon
kvinwang
committed
7fae5c1
test(integration): model Cloudflare zone discovery
kvinwang
committed
c2965f9
test(tdxlab): prepare user namespaces
kvinwang
committed
68a0c92
test(integration): bridge legacy Gateway contracts
kvinwang
committed
e62422c
test: fix mixed-version gateway failover harness
kvinwang
committed
cabeefb
test: select live KMS for failover preparation
kvinwang
committed
26cf6c3
test: prepare identity matrix alternate image
kvinwang
committed
a42b70f
test: remove unused collateral prerequisite
kvinwang
committed
9a75c33
test: update KMS compatibility certificate config
kvinwang
committed
6eed4c4
test: follow split VMM restart policy tests
kvinwang
committed
426c451
test: resolve Cargo for gateway refresh harness
kvinwang
committed
1174ae1
test: align VMM QEMU platform matrix
kvinwang
committed
161186d
test: follow current VMM networking contract
kvinwang
committed
82c2fea
test: shorten VMM networking runtime paths
kvinwang
committed
bd4cadd
test: start bridge VM before launch inspection
kvinwang
committed
558b69b
test: prepare VMM hugepage prerequisites
kvinwang
committed
d832717
test: exercise VMM hugepage lifecycle
kvinwang
committed
c760bf3
test: explicitly start user network VM
kvinwang
committed
89becb7
test: detach networking case supervisor
kvinwang
committed
9f57e88
test: preserve VMM placement command evidence
kvinwang
committed
5cffa84
test: inspect supervised QEMU launch spec
kvinwang
committed
a5d8188
test: follow attestation suite growth
kvinwang
committed
a72ba70
test: follow current mock attestation CLI
kvinwang
committed
5c127ce
test: require both cloud quote matrices
kvinwang
committed
41d3607
test: replace removed verifier matrix selectors
kvinwang
committed
1b14287
test: align verifier coverage with current suites
kvinwang
committed
80260ac
test: prepare isolated Docker subnet pool
kvinwang
committed
2db795a
test: preserve CAA concurrency diagnostics
kvinwang
committed
fb06251
test: follow Gateway CAA operation locking
kvinwang
committed
5df6708
test: restore current Certbot and auth regressions
kvinwang
committed
170f3fd
test: follow current Gateway unit matrices
kvinwang
committed
2f78ccc
test: follow current Gateway port-policy matrix
kvinwang
committed
e2b8ec8
test: make Gateway DNS routing fixture deterministic
kvinwang
committed
7a67e6c
test: follow removed KMS certificate-log surface
kvinwang
committed
18a8c61
test: execute current KMS binary test target
kvinwang
committed
a20b781
test: prepare seed-matched guest compatibility evidence
kvinwang
committed
9f1678a
test: cover KMS signatures and injected Gateway outages
kvinwang
committed
52001e7
test: select prepared TDX simulator explicitly
kvinwang
committed
02e5f17
test: run compatibility evidence without hardware TDX
kvinwang
committed
805bdba
test: follow verifier certificate profile ownership
kvinwang
committed
250bbdf
test: prepare lease-owned attestation VMM
kvinwang
committed
3a3a930
test: separate physical and simulator collateral
kvinwang
committed
fd25155
test: observe app identity during Gateway outage
kvinwang
committed
b2fa075
test: separate Gateway boot and registration probes
kvinwang
committed
0735ca0
test: exercise Gateway identity fallback
kvinwang
committed
a931c7e
test: decouple identity probe from Gateway cache
kvinwang
committed
3b91974
test: allow clients without Gateway endpoints
kvinwang
committed
c3faa0e
test: run guest compatibility on physical TDX
kvinwang
committed
4c3d687
test: prepare physical compatibility collateral
kvinwang
committed
e3cbeba
test(verifier): avoid fixed cc-eventlog test count
kvinwang
committed
377dea3
test: prepare simulator collateral before guest boot
kvinwang
committed
51dce1f
test: prepare simulated identity image variant
kvinwang
committed
20c95f3
test(simulator): restore SEV-SNP ABI regression coverage
kvinwang
committed
60b2d13
test(kms): prepare nested contract dependencies
kvinwang
committed
6fa6fdb
test(kms): probe event audit contract fixtures
kvinwang
committed
5307a16
test(kms): probe runtime contract fixtures
kvinwang
committed
93cd8fb
test(guest): wait for bind conflict cleanup
kvinwang
committed
47acec9
test(gateway): synchronize concurrent renewal requests
kvinwang
committed
c99af03
test(guest): cancel bind conflict restart jobs
kvinwang
committed
47de33b
test(gateway): prepare allocation wireguard fixture
kvinwang
committed
de68f2d
test(gateway): establish distributed renewal contention
kvinwang
committed
b2ef123
test(gateway): isolate allocation recycle phase
kvinwang
committed
6915516
test(integration): retry rolling KMS metadata probes
kvinwang
committed
123e733
test(platform): wait for sealing provider recovery
kvinwang
committed
41dc9c9
test(harness): probe lifecycle readiness deterministically
kvinwang
committed
0bc59d6
test(gateway): align allocation and renewal invariants
kvinwang
committed
af366ef
test(integration): await bounded KMS boot failure
kvinwang
committed
5eba870
test(gateway): recheck distributed renewal freshness
kvinwang
committed
7f3f693
test(provider): retry transient sealing startup
kvinwang
committed
c6793e7
test(harness): harden runtime readiness probes
kvinwang
committed
93cf81d
test(vmm): probe the browser endpoint directly
kvinwang
committed
172e2db
test(plan): cover post-baseline merged regressions
kvinwang
committed
2e24f69
test(plan): refresh post-merge harness expectations
kvinwang
committed
72cd0bd
test(plan): align ACPI measurement matrix
kvinwang
committed
88850cc
test(plan): harden dependency-backed harnesses
kvinwang
committed
9df1d0e
test(plan): run prepared Playwright offline
kvinwang
committed
dffe36e
test(plan): make UI browser execution deterministic
kvinwang
committed
a0bc29d
test(plan): preserve expected stargz failures
kvinwang
committed
969c166
test(plan): unmount stale stargz snapshots
kvinwang
committed
5d4ea96
test(plan): use persistent stargz storage
kvinwang
committed
2fa623e
test(plan): wait for stargz unmounts
kvinwang
committed
c598652
test(plan): preserve concurrent pull failures
kvinwang
committed
8e8e74b
test(plan): deterministically corrupt stargz layer
kvinwang
committed
dea0309
test(plan): accept truncated stargz diagnostics
kvinwang
committed
40c13ab
test(plan): assert corrupt stargz rejection by status
kvinwang
committed
e129531
test(plan): assert stargz outages by status
kvinwang
committed
2647360
test(plan): force remote stargz corruption path
kvinwang
committed
1ed1de4
test(plan): zero corrupt stargz layer
kvinwang
committed
78eef1a
test(plan): clear stargz cache before corruption
kvinwang
committed
72cfbd7
test(plan): restart registry after layer corruption
kvinwang
committed
8c6421d
test(gateway): cover multi-cluster CVM registration
kvinwang
committed
a1736ea
test(gateway): align native multi-cluster rows
kvinwang
committed
bcac106
test(gateway): verify multi-cluster proxy data paths
kvinwang
committed
7134ff1
test(gateway): harden multi-cluster proxy acceptance
kvinwang
committed
ba5feff
test(vmm): document macvtap connectivity acceptance
kvinwang
committed
44d71b6
test(plan): gate tdxlab sweeps on preflight
kvinwang
committed
8821eba
refactor(test): colocate core component suite
kvinwang
committed
f40b039
fix(test): align image provenance with builder metadata
kvinwang
committed
104bf14
test: harden core component coverage
kvinwang
committed
542cd86
fix(test): preserve current source fixtures
kvinwang
committed
c9c2b34
test: pin Bun for tdxlab runs
kvinwang
committed
a697765
fix(test): preserve Bun path operations
kvinwang
committed
a15a7d4
refactor(test): externalize hardware host configuration
kvinwang
committed
6e18a28
fix(test): resolve configured Docker runner lazily
kvinwang
committed
ba227ff
fix(test): retain guest port reservations for active leases
kvinwang
committed
2c608ae
fix(test): wait for guest API before Gateway startup
kvinwang
committed
662a2e9
fix(test): retry bounded Sysbox recovery
kvinwang
committed
b624d3f
fix(test): make version cleanup independent of caller env
kvinwang
committed
f80e09f
fix(test): execute gated Cloudflare client tests
kvinwang
committed
ef5abf0
test(plan): cover changes since PR 841 baseline
kvinwang
committed
494ba26
fix(test): align frozen guest RPC coverage
kvinwang
committed
fc0bf17
fix(test): record removed RPC evidence schema
kvinwang
committed
6c616fb
fix(test): align component matrices with next
kvinwang
committed
1e868da
fix(test): cover declarative OVMF selection
kvinwang
committed
67295cb
fix(test): ignore legacy image version metadata
kvinwang
committed
3ea55a8

Commits on Aug 26, 2026

fix(test): accept explicit gateway fallback rejection
kvinwang
committed
1e7ead1
fix(test): tolerate absent gateway recovery samples
kvinwang
committed
d8cbd45

Uh oh!

Commits

Commits on Aug 25, 2026