test: add core component acceptance infrastructure - #841

Open

kvinwang wants to merge 126 commits into

nextfrom

codex/core-components-test-infrastructure

Commits on Aug 6, 2026

test(infrastructure): add deterministic component harnesses
kvinwang
committed
230b997
test(plan): define core component acceptance coverage
kvinwang
committed
c5619fe
test(results): promote verified component coverage
kvinwang
committed
ebf9c1f
docs(testing): account for split product commits
kvinwang
committed
8532d7c
docs(testing): record product PR split audit
kvinwang
committed
c4ed9ee
docs(testing): account for simulator PR split
kvinwang
committed
9eba469
docs(testing): retain merged PRs in split inventory
kvinwang
committed
11e5f90
test(simulator): enforce configured TPM node ownership
kvinwang
committed
10bf345
docs(testing): account for TPM ownership correction
kvinwang
committed
c3aa1d1
Revert "test(simulator): enforce configured TPM node ownership"
kvinwang
committed
83a5c90
docs(testing): reject TPM node race tolerance
kvinwang
committed
4716d84
docs(testing): add simulator retest watchlist
kvinwang
committed
5dc06bd
test(gateway): use existing health and dashboard routes
kvinwang
committed
85865ec
test(verifier): assert simulator trust-root isolation
kvinwang
committed
571ff28
test(verifier): validate embedded cache versions
kvinwang
committed
a8e4b12
docs(testing): align rewritten PR accounting
kvinwang
committed
9afcb1e
test(guest): validate normal swap boot lifecycle
kvinwang
committed
d6ab996
docs(testing): record closed supervisor socket PR
kvinwang
committed
596cf1c
test(supervisor): validate UDS auto-start lifecycle
kvinwang
committed
c73a361
test(util): validate certificate outputs independently
kvinwang
committed
6c62bf6
test(supervisor): separate client lifecycle coverage
kvinwang
committed
15185c7
test(gateway): drop DNS credential encryption assumptions
kvinwang
committed
a398b9f
test(gateway): cover app-address DNS failover
kvinwang
committed
fe3c54f
test(guest): pin wg-checker timing to a uniform 10s clock
kvinwang
committed
ae88e95
test(vmm): cover filesystem-only CID reload
kvinwang
committed
86fac77
test(gateway): register upgrade domain through admin API
kvinwang
committed
5f37d84
test(gateway): provision upgrade domain through certbot
kvinwang
committed
a4cc8cd
test(vmm): preserve stopped VM CID on reload
kvinwang
committed
8180e78
test(guest): retarget tc-gos-observabil-003 at the gateway checker
kvinwang
committed
3641538
test(gateway): cover ACME credential rotation
kvinwang
committed
8e6dcaf
test(kms): cover CA persistence and renewal
kvinwang
committed
6f7faa7
test(vmm): retarget tc-vmm-serial-006 at log rotation
kvinwang
committed
901306f
test(vmm): cover libvirt network filter lifecycle
kvinwang
committed
0b4fa34
test(vmm): wait for restarted netd listener
kvinwang
committed
44b1822
test(vmm): avoid destructive netd readiness probe
kvinwang
committed
bc676df
test(vmm): read generated NIC MACs from launch plan
kvinwang
committed
1d53198
test(vmm): isolate secondary host API port
kvinwang
committed
8517b43
test(vmm): inject spoof traffic on the host interface
kvinwang
committed
b4c4761
test(vmm): preserve failure evidence and force cleanup
kvinwang
committed
a085f9a
test(vmm): verify filtered network survives QEMU restart
kvinwang
committed
749858e

Commits on Aug 7, 2026

test(kms): restore sign-cert fixture binary
kvinwang
committed
9b9cf30
test: follow current guest and VMM configuration
kvinwang
committed
5613fa7
test(runner): retain sweep failure diagnostics
kvinwang
committed
67dde57
test(tdxlab): prepare deterministic run prerequisites
kvinwang
committed
77cbc2f
test(tdxlab): provision pinned Foundry tools
kvinwang
committed
b6ed549
chore(kms): refresh authorization Bun locks
kvinwang
committed
3f6914b
test(kms): resolve prepared startup binary
kvinwang
committed
1f0411d
test(tdxlab): resolve user toolchain paths
kvinwang
committed
084fab3
test(kms): accept canonical empty Finish response
kvinwang
committed
c35dbe2
test(tdxlab): document prepared execution path
kvinwang
committed
76fa24a
test(runner): fail sweeps with nonpassing cases
kvinwang
committed
ab8b0e7
test(gateway): follow current debug config
kvinwang
committed
34f71ea
test(attestation): prepare legacy TDX image verification
kvinwang
committed
a334903
test(attestation): refresh NitroTPM replay fixture
kvinwang
committed
e869cdc
test(guest): retain gateway checker failure context
kvinwang
committed
669d96f
test(tdxlab): build candidate guest prerequisites
kvinwang
committed
58e351d
test(tdxlab): build images from a clean worktree
kvinwang
committed
73c41e4
test(tdxlab): discover flavor-specific mkosi outputs
kvinwang
committed
37304fa
test(gateway): follow current public RPC route
kvinwang
committed
d9f7626
test(tdxlab): prepare current GCP TPM replay
kvinwang
committed
5557bda
test(guest): capture gateway checker exit codes safely
kvinwang
committed
53a76dd
test(mkosi): prepare ephemeral OpenSSH host keys
kvinwang
committed
6cd0862
test(guest): use deterministic quote output fault
kvinwang
committed
6fe5473
test(guest): use deterministic app-key output fault
kvinwang
committed
156dadd
test(guest): follow atomic random output replacement
kvinwang
committed
a6cbf43
test(guest): use deterministic attestation output fault
kvinwang
committed
806a8f2
test(guest): use deterministic get-keys output fault
kvinwang
committed
076786c
test(simulator): prepare platform replay fixtures
kvinwang
committed
113399f
test(gateway): follow current RPC response contracts
kvinwang
committed
810c5b5
test(kms): accept current Empty JSON encoding
kvinwang
committed
eb22976
test(kms): follow cloned shutdown handle
kvinwang
committed
3a864c1
test(verifier): follow certificate profile validation
kvinwang
committed
bd3d37b
test(verifier): use a valid oneshot config port
kvinwang
committed
5ec5002
test(vmm): follow missing log response contract
kvinwang
committed
43fdb47
test(vmm): materialize mutable image fixtures
kvinwang
committed
0ee2530
test(kms): follow current root-key handover
kvinwang
committed
ebb96e6
test(gateway): isolate fixture WireGuard subnets
kvinwang
committed
95be4d7
test(gateway): follow current public info route
kvinwang
committed
6324fb5
test(gateway): accept current Empty exit response
kvinwang
committed
060cf35
test(gateway): verify malformed Empty framing
kvinwang
committed
569eb8e
test(gateway): follow current debug configuration
kvinwang
committed
c617606
test(gateway): follow on-demand TLS key generation
kvinwang
committed
d0f2c92
test(gateway): edit prepared TLS paths by section
kvinwang
committed
5d559b9
test(gateway): accept current DNS Empty responses
kvinwang
committed
8ae60f8
test(gateway): follow current certificate store suite
kvinwang
committed
eea37e7
test(vmm): follow private CID state contract
kvinwang
committed
472fbf0
test(vmm): stage reload fixtures across filesystems
kvinwang
committed
a796fe7
test(vmm): prepare management port for config checks
kvinwang
committed
06be5c7
test(vmm): follow current UI RPC diagnostics
kvinwang
committed
e2d6bcf
test(vmm): follow current internal source matrices
kvinwang
committed
9665fb1
test(guest): prepare a shell-capable log fixture image
kvinwang
committed
3183f26
test(guest): capture log fixture preparation diagnostics
kvinwang
committed
94b3935
test(tdxlab): prepare dashboard log workload image
kvinwang
committed
e7bc9e9
test(tdxlab): bind dashboard preparation to case identity
kvinwang
committed
553fd1e
test(kms): prepare finalized Ethereum head
kvinwang
committed
402d41e
test(integration): follow current gateway admin contract
kvinwang
committed
4335525
test(tdxlab): preserve guest image integrity
kvinwang
committed
429547f
test(integration): bound gateway DNS fixture waits
kvinwang
committed
1291f6f
test(integration): accept compatible Exit request evolution
kvinwang
committed
ba67f93
style(test): format integration matrix
kvinwang
committed
7bd24fd
test(integration): use mock DNS listener port
kvinwang
committed
27a900c
test(fixtures): bind cleanup to prepared state root
kvinwang
committed
c135a96
test(integration): pin mock DNS zone
kvinwang
committed
cc7166f
test(tdxlab): preflight Docker daemon
kvinwang
committed
f4e2a4e
test(integration): model Cloudflare zone discovery
kvinwang
committed
2a72fdc
test(tdxlab): prepare user namespaces
kvinwang
committed
37d920b
test(integration): bridge legacy Gateway contracts
kvinwang
committed
26f6a1c

Commits on Aug 8, 2026

test: fix mixed-version gateway failover harness
kvinwang
committed
431ea97
test: select live KMS for failover preparation
kvinwang
committed
16f9dec
test: prepare identity matrix alternate image
kvinwang
committed
8c77fbb
test: remove unused collateral prerequisite
kvinwang
committed
276862f
test: restore PCCS collateral lifecycle matrix
kvinwang
committed
592df3e
test: cover guest configuration entry matrix
kvinwang
committed
4a9429f
test: update KMS compatibility certificate config
kvinwang
committed
f64c15c
test: restore KMS provider failover matrix
kvinwang
committed
28df9f6
test: restore gateway registration failover matrix
kvinwang
committed
794a5ce
fix(attestation): serialize TDX V2 event preimages
kvinwang
committed
c735f2b
fix(simulator): make device lifecycle tests deterministic
kvinwang
committed
4879b7e
test: follow split VMM restart policy tests
kvinwang
committed
b973583
test: resolve Cargo for gateway refresh harness
kvinwang
committed
712a5d2
test: align VMM QEMU platform matrix
kvinwang
committed
9439f66
test: follow current VMM networking contract
kvinwang
committed
cafdbc2
test: shorten VMM networking runtime paths
kvinwang
committed
e5848d5
test: start bridge VM before launch inspection
kvinwang
committed
617701a
test: prepare VMM hugepage prerequisites
kvinwang
committed
354118b
test: exercise VMM hugepage lifecycle
kvinwang
committed
6e82420