test: add colocated core component acceptance suite - #841

Open

kvinwang wants to merge 210 commits into

nextfrom

codex/core-components-test-infrastructure

Commits on Aug 18, 2026

test(infrastructure): add deterministic component harnesses
kvinwang
committed
18b195a
test(plan): define core component acceptance coverage
kvinwang
committed
466d231
test(results): promote verified component coverage
kvinwang
committed
1b819be
docs(testing): account for split product commits
kvinwang
committed
7b2ea0d
docs(testing): record product PR split audit
kvinwang
committed
57adf23
docs(testing): account for simulator PR split
kvinwang
committed
47e1f4a
docs(testing): retain merged PRs in split inventory
kvinwang
committed
5e340cf
test(simulator): enforce configured TPM node ownership
kvinwang
committed
52fe463
docs(testing): account for TPM ownership correction
kvinwang
committed
a85db23
Revert "test(simulator): enforce configured TPM node ownership"
kvinwang
committed
a8bcbee
docs(testing): reject TPM node race tolerance
kvinwang
committed
a6094ae
docs(testing): add simulator retest watchlist
kvinwang
committed
fde1656
test(gateway): use existing health and dashboard routes
kvinwang
committed
9db6ca0
test(verifier): assert simulator trust-root isolation
kvinwang
committed
91a7669
test(verifier): validate embedded cache versions
kvinwang
committed
1798b2b
docs(testing): align rewritten PR accounting
kvinwang
committed
8ef63e0
test(guest): validate normal swap boot lifecycle
kvinwang
committed
df73df1
docs(testing): record closed supervisor socket PR
kvinwang
committed
2d61a48
test(supervisor): validate UDS auto-start lifecycle
kvinwang
committed
2618460
test(util): validate certificate outputs independently
kvinwang
committed
d1ff3c1
test(supervisor): separate client lifecycle coverage
kvinwang
committed
ccc69d7
test(gateway): drop DNS credential encryption assumptions
kvinwang
committed
cc6b92e
test(gateway): cover app-address DNS failover
kvinwang
committed
be66ca8
test(guest): pin wg-checker timing to a uniform 10s clock
kvinwang
committed
6d57a9b
test(vmm): cover filesystem-only CID reload
kvinwang
committed
a232686
test(gateway): register upgrade domain through admin API
kvinwang
committed
017ffd8
test(gateway): provision upgrade domain through certbot
kvinwang
committed
0c5d954
test(vmm): preserve stopped VM CID on reload
kvinwang
committed
ae3f006
test(guest): retarget tc-gos-observabil-003 at the gateway checker
kvinwang
committed
d3b42f4
test(gateway): cover ACME credential rotation
kvinwang
committed
434497c
test(kms): cover CA persistence and renewal
kvinwang
committed
54f6fd3
test(vmm): retarget tc-vmm-serial-006 at log rotation
kvinwang
committed
50bed7f
test(vmm): cover libvirt network filter lifecycle
kvinwang
committed
e6e41af
test(vmm): wait for restarted netd listener
kvinwang
committed
f0e2a9c
test(vmm): avoid destructive netd readiness probe
kvinwang
committed
09aabaa
test(vmm): read generated NIC MACs from launch plan
kvinwang
committed
61982d9
test(vmm): isolate secondary host API port
kvinwang
committed
6d3d9d0
test(vmm): inject spoof traffic on the host interface
kvinwang
committed
b4eb164
test(vmm): preserve failure evidence and force cleanup
kvinwang
committed
67a2052
test(vmm): verify filtered network survives QEMU restart
kvinwang
committed
0587d69
test: follow current guest and VMM configuration
kvinwang
committed
c1d6a0b
test(runner): retain sweep failure diagnostics
kvinwang
committed
04e08ea
test(tdxlab): prepare deterministic run prerequisites
kvinwang
committed
66437bc
test(tdxlab): provision pinned Foundry tools
kvinwang
committed
1d4ec23
test(kms): resolve prepared startup binary
kvinwang
committed
24c00ba
test(tdxlab): resolve user toolchain paths
kvinwang
committed
c87e3f3
test(kms): accept canonical empty Finish response
kvinwang
committed
78b42f1
test(tdxlab): document prepared execution path
kvinwang
committed
915992f
test(runner): fail sweeps with nonpassing cases
kvinwang
committed
36dd830
test(gateway): follow current debug config
kvinwang
committed
51fadfa
test(attestation): prepare legacy TDX image verification
kvinwang
committed
04e59f9
test(attestation): refresh NitroTPM replay fixture
kvinwang
committed
a855058
test(guest): retain gateway checker failure context
kvinwang
committed
3942016
test(tdxlab): build candidate guest prerequisites
kvinwang
committed
4a07c60
test(tdxlab): build images from a clean worktree
kvinwang
committed
6f0a8a9
test(tdxlab): discover flavor-specific mkosi outputs
kvinwang
committed
146c606
test(gateway): follow current public RPC route
kvinwang
committed
61d29c7
test(tdxlab): prepare current GCP TPM replay
kvinwang
committed
ea0c95f
test(guest): capture gateway checker exit codes safely
kvinwang
committed
35c8335
test(mkosi): prepare ephemeral OpenSSH host keys
kvinwang
committed
91b7961
test(guest): use deterministic quote output fault
kvinwang
committed
ec46241
test(guest): use deterministic app-key output fault
kvinwang
committed
3b1c36c
test(guest): follow atomic random output replacement
kvinwang
committed
7f23bd7
test(guest): use deterministic attestation output fault
kvinwang
committed
55451e3
test(guest): use deterministic get-keys output fault
kvinwang
committed
a687bf4
test(simulator): prepare platform replay fixtures
kvinwang
committed
854f40a
test(gateway): follow current RPC response contracts
kvinwang
committed
4b4c567
test(kms): accept current Empty JSON encoding
kvinwang
committed
756d2c0
test(kms): follow cloned shutdown handle
kvinwang
committed
376ff78
test(verifier): follow certificate profile validation
kvinwang
committed
c59a45b
test(verifier): use a valid oneshot config port
kvinwang
committed
9e9d40c
test(vmm): follow missing log response contract
kvinwang
committed
59a4f3d
test(vmm): materialize mutable image fixtures
kvinwang
committed
baf02c2
test(kms): follow current root-key handover
kvinwang
committed
ea99525
test(gateway): isolate fixture WireGuard subnets
kvinwang
committed
fee7295
test(gateway): follow current public info route
kvinwang
committed
7a126fe
test(gateway): accept current Empty exit response
kvinwang
committed
9681e75
test(gateway): verify malformed Empty framing
kvinwang
committed
02358af
test(gateway): follow current debug configuration
kvinwang
committed
584b586
test(gateway): follow on-demand TLS key generation
kvinwang
committed
828e535
test(gateway): edit prepared TLS paths by section
kvinwang
committed
c2a7001
test(gateway): accept current DNS Empty responses
kvinwang
committed
811f814
test(gateway): follow current certificate store suite
kvinwang
committed
0ff9c59
test(vmm): follow private CID state contract
kvinwang
committed
8962e6a
test(vmm): stage reload fixtures across filesystems
kvinwang
committed
1b1e450
test(vmm): prepare management port for config checks
kvinwang
committed
58c6c2d
test(vmm): follow current UI RPC diagnostics
kvinwang
committed
a38f2be
test(vmm): follow current internal source matrices
kvinwang
committed
bba2dd9
test(guest): prepare a shell-capable log fixture image
kvinwang
committed
0319dfc
test(guest): capture log fixture preparation diagnostics
kvinwang
committed
97c5aea
test(tdxlab): prepare dashboard log workload image
kvinwang
committed
e17e204
test(tdxlab): bind dashboard preparation to case identity
kvinwang
committed
529e820
test(kms): prepare finalized Ethereum head
kvinwang
committed
b1bcf7c
test(integration): follow current gateway admin contract
kvinwang
committed
88461a1
test(tdxlab): preserve guest image integrity
kvinwang
committed
2c1fce8
test(integration): bound gateway DNS fixture waits
kvinwang
committed
0824a1f
test(integration): accept compatible Exit request evolution
kvinwang
committed
9ee1862
style(test): format integration matrix
kvinwang
committed
cf025e0
test(integration): use mock DNS listener port
kvinwang
committed
89e67ae
test(fixtures): bind cleanup to prepared state root
kvinwang
committed
56a512b
test(integration): pin mock DNS zone
kvinwang
committed
4c8d697
test(tdxlab): preflight Docker daemon
kvinwang
committed
543f156
test(integration): model Cloudflare zone discovery
kvinwang
committed
945a2de
test(tdxlab): prepare user namespaces
kvinwang
committed
e2d8172
test(integration): bridge legacy Gateway contracts
kvinwang
committed
6cf42c2
test: fix mixed-version gateway failover harness
kvinwang
committed
810b80d
test: select live KMS for failover preparation
kvinwang
committed
d9fe5ef
test: prepare identity matrix alternate image
kvinwang
committed
e7e0542
test: remove unused collateral prerequisite
kvinwang
committed
562d7e5
test: update KMS compatibility certificate config
kvinwang
committed
dd14aac
test: follow split VMM restart policy tests
kvinwang
committed
c17a39b
test: resolve Cargo for gateway refresh harness
kvinwang
committed
9655737
test: align VMM QEMU platform matrix
kvinwang
committed
cf71de6
test: follow current VMM networking contract
kvinwang
committed
c8c813c
test: shorten VMM networking runtime paths
kvinwang
committed
f0f190a
test: start bridge VM before launch inspection
kvinwang
committed
350686c
test: prepare VMM hugepage prerequisites
kvinwang
committed
ecf7bc3
test: exercise VMM hugepage lifecycle
kvinwang
committed
c72b23f
test: explicitly start user network VM
kvinwang
committed
fd1d310
test: detach networking case supervisor
kvinwang
committed
f1ac52f
test: preserve VMM placement command evidence
kvinwang
committed
6da577c
test: inspect supervised QEMU launch spec
kvinwang
committed
a7c451d
test: follow attestation suite growth
kvinwang
committed
b7ae46e
test: follow current mock attestation CLI
kvinwang
committed
452a0a9
test: require both cloud quote matrices
kvinwang
committed
1cb2cd7
test: replace removed verifier matrix selectors
kvinwang
committed
1cc9145
test: align verifier coverage with current suites
kvinwang
committed
9ae16ab
test: prepare isolated Docker subnet pool
kvinwang
committed
c2c44dd
test: preserve CAA concurrency diagnostics
kvinwang
committed
7df67c6
test: follow Gateway CAA operation locking
kvinwang
committed
cc63c83
test: restore current Certbot and auth regressions
kvinwang
committed
e1daac1
test: follow current Gateway unit matrices
kvinwang
committed
20a57a0
test: follow current Gateway port-policy matrix
kvinwang
committed
6b2467d
test: make Gateway DNS routing fixture deterministic
kvinwang
committed
8aad0c5
test: follow removed KMS certificate-log surface
kvinwang
committed
7fb2e2e
test: execute current KMS binary test target
kvinwang
committed
cfcddbe
test: prepare seed-matched guest compatibility evidence
kvinwang
committed
6011902
test: cover KMS signatures and injected Gateway outages
kvinwang
committed
17169ce
test: select prepared TDX simulator explicitly
kvinwang
committed
10b72e7
test: run compatibility evidence without hardware TDX
kvinwang
committed
fcda53e
test: follow verifier certificate profile ownership
kvinwang
committed
c64ddaa
test: prepare lease-owned attestation VMM
kvinwang
committed
4eac7b4
test: separate physical and simulator collateral
kvinwang
committed
be91025
test: observe app identity during Gateway outage
kvinwang
committed
71d6a4f
test: separate Gateway boot and registration probes
kvinwang
committed
f21b40f
test: exercise Gateway identity fallback
kvinwang
committed
eb37dfc
test: decouple identity probe from Gateway cache
kvinwang
committed
0257773
test: allow clients without Gateway endpoints
kvinwang
committed
12f4d9e
test: run guest compatibility on physical TDX
kvinwang
committed
2c52a8b
test: prepare physical compatibility collateral
kvinwang
committed
116af31
test(verifier): avoid fixed cc-eventlog test count
kvinwang
committed
95de7c9
test: prepare simulator collateral before guest boot
kvinwang
committed
d8971eb
test: prepare simulated identity image variant
kvinwang
committed
c68818e
test(simulator): restore SEV-SNP ABI regression coverage
kvinwang
committed
8d06b8c
test(kms): prepare nested contract dependencies
kvinwang
committed
6ac1e84
test(kms): probe event audit contract fixtures
kvinwang
committed
cc18035
test(kms): probe runtime contract fixtures
kvinwang
committed
7b025cd
test(guest): wait for bind conflict cleanup
kvinwang
committed
2a001e2
test(gateway): synchronize concurrent renewal requests
kvinwang
committed
115ef88
test(guest): cancel bind conflict restart jobs
kvinwang
committed
d3f9865
test(gateway): prepare allocation wireguard fixture
kvinwang
committed
8fbb514
test(gateway): establish distributed renewal contention
kvinwang
committed
fb62025
test(gateway): isolate allocation recycle phase
kvinwang
committed
ad35fe7
test(integration): retry rolling KMS metadata probes
kvinwang
committed
d7ae399
test(platform): wait for sealing provider recovery
kvinwang
committed
a36cf4d
test(harness): probe lifecycle readiness deterministically
kvinwang
committed
5fdb0be
test(gateway): align allocation and renewal invariants
kvinwang
committed
6c3e5e4
test(integration): await bounded KMS boot failure
kvinwang
committed
ab60d2b
test(gateway): recheck distributed renewal freshness
kvinwang
committed
89e2faf
test(provider): retry transient sealing startup
kvinwang
committed
ee05250
test(harness): harden runtime readiness probes
kvinwang
committed
d46fa45
test(vmm): probe the browser endpoint directly
kvinwang
committed
147b868
test(plan): cover post-baseline merged regressions
kvinwang
committed
3654b87
test(plan): refresh post-merge harness expectations
kvinwang
committed
7b8e7e2
test(plan): align ACPI measurement matrix
kvinwang
committed
aa594e3
test(plan): harden dependency-backed harnesses
kvinwang
committed
b3ae661
test(plan): run prepared Playwright offline
kvinwang
committed
707e995
test(plan): make UI browser execution deterministic
kvinwang
committed
243cf47
test(plan): preserve expected stargz failures
kvinwang
committed
d392fd0
test(plan): unmount stale stargz snapshots
kvinwang
committed
c881f23
test(plan): use persistent stargz storage
kvinwang
committed
c368274
test(plan): wait for stargz unmounts
kvinwang
committed
ad21dea
test(plan): preserve concurrent pull failures
kvinwang
committed
32b4c3a
test(plan): deterministically corrupt stargz layer
kvinwang
committed
acae03b
test(plan): accept truncated stargz diagnostics
kvinwang
committed
f76ae1e
test(plan): assert corrupt stargz rejection by status
kvinwang
committed
278570a
test(plan): assert stargz outages by status
kvinwang
committed
dff58f3
test(plan): force remote stargz corruption path
kvinwang
committed
18c05f4
test(plan): zero corrupt stargz layer
kvinwang
committed
c2cd488
test(plan): clear stargz cache before corruption
kvinwang
committed
eea03d1
test(plan): restart registry after layer corruption
kvinwang
committed
c8c44a4
test(gateway): cover multi-cluster CVM registration
kvinwang
committed
e811477
test(gateway): align native multi-cluster rows
kvinwang
committed
bb66f67
test(gateway): verify multi-cluster proxy data paths
kvinwang
committed
1ed3859
test(gateway): harden multi-cluster proxy acceptance
kvinwang
committed
72387f8
test(vmm): document macvtap connectivity acceptance
kvinwang
committed
fb631a6
test(plan): gate tdxlab sweeps on preflight
kvinwang
committed
900422f
refactor(test): colocate core component suite
kvinwang
committed
02ac8fc
fix(test): align image provenance with builder metadata
kvinwang
committed
c8e0106
test: harden core component coverage
kvinwang
committed
fc195f1
fix(test): preserve current source fixtures
kvinwang
committed
9381f95
test: pin Bun for tdxlab runs
kvinwang
committed
245356b
fix(test): preserve Bun path operations
kvinwang
committed
359542e
refactor(test): externalize hardware host configuration
kvinwang
committed
bfbb437
fix(test): resolve configured Docker runner lazily
kvinwang
committed
25398cf
fix(test): retain guest port reservations for active leases
kvinwang
committed
f64c558
fix(test): wait for guest API before Gateway startup
kvinwang
committed
2fbe77c
fix(test): retry bounded Sysbox recovery
kvinwang
committed
323e641
fix(test): make version cleanup independent of caller env
kvinwang
committed
f1f2878
fix(test): execute gated Cloudflare client tests
kvinwang
committed
d7b3b76