jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-12 18:02:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(runtime): enforce functional containment after closing execution bypasses (ODY-141)

Browse Source
This commit is contained in:
Alexandre Teixeira
2026-10-01 22:11:10 +01:00
parent 4efb85ee33
commit 63fe66e85e
15 changed files with 564 additions and 152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/test_containment_contract.py
+2 -4
View File
@@ -349,10 +349,8 @@ def test_the_two_modes_differ_only_in_whether_the_shortfall_refuses(monkeypatch,
assert frozenset(reported.unenforced_required) == caught.value.missing
def test_report_only_is_the_shipped_default():
"""Pinned deliberately: merging this must not change behaviour on a host
without bubblewrap. Flipping it is a one-line diff, reviewed as one."""
assert containment.CONTAINMENT_MODE == containment.MODE_REPORT_ONLY
def test_enforcement_is_the_shipped_default():
assert containment.CONTAINMENT_MODE == containment.MODE_ENFORCING
# ── Spec validation: caller bugs raise in both modes ────────────────────────