Harden Health verification isolation
This commit is contained in:
@@ -496,7 +496,7 @@ git add config/dot/quickshell/scripts/panama-doctor config/dot/quickshell/servic
|
||||
git commit -m "Add bounded Panama recovery actions"
|
||||
```
|
||||
|
||||
### Task 7: Full verification, live read-only audit, and documentation
|
||||
### Task 7: Full verification, controller-deferred live audit, and documentation
|
||||
|
||||
**Integration note:** `origin/main` added Mouse, Privacy, Region, and Online
|
||||
Accounts destinations while this feature was in review. Merge commit `4ef2f01`
|
||||
@@ -518,7 +518,9 @@ doctor/IPC comparison. Those checks remain for the controller after code review.
|
||||
|
||||
**Interfaces:**
|
||||
- Consumes: the complete feature and existing regression suite.
|
||||
- Produces: current user documentation, a redacted live health snapshot, and final verification evidence.
|
||||
- Produces: current user documentation and final contract evidence. The
|
||||
redacted live health snapshot and live shell audit are deferred to the
|
||||
controller after code review.
|
||||
|
||||
- [x] **Step 1: Document boundaries and entry points**
|
||||
|
||||
@@ -538,8 +540,8 @@ for test in tests/quickshell/*contract.sh; do "$test"; done
|
||||
for test in tests/hypr/*contract.sh; do "$test"; done
|
||||
```
|
||||
|
||||
Expected: every command exits 0. After the Settings parity merge, the current
|
||||
inventory is 65 Quickshell contracts and 2 Hyprland contracts (the original
|
||||
Expected: every command exits 0. After the latest Settings and installer work,
|
||||
the current inventory is 66 Quickshell contracts and 2 Hyprland contracts (the original
|
||||
pre-merge estimate was 58).
|
||||
|
||||
Integration result: syntax and all focused Health/Settings contracts pass. Two
|
||||
@@ -549,7 +551,10 @@ run two failed Focus Session and Health Service. Each failed contract passed
|
||||
immediately when rerun alone. Hyprland contracts passed 2/2. No out-of-scope
|
||||
test or service code was changed to hide this suite-order interference.
|
||||
|
||||
- [ ] **Step 3: Run a redacted live read-only comparison**
|
||||
- [ ] **Step 3: Controller runs a redacted live read-only comparison**
|
||||
|
||||
Deferred to the controller after code review; Task 7 does not produce this
|
||||
live output.
|
||||
|
||||
Run:
|
||||
|
||||
@@ -563,7 +568,10 @@ qs ipc call health status | jq '{status, busy, checks: [.checks[] | {id, status}
|
||||
|
||||
Expected: helper and direct service states agree. Do not print details from integrations; copied and IPC reports contain only redacted authored observations.
|
||||
|
||||
- [ ] **Step 4: Reload and inspect the live shell**
|
||||
- [ ] **Step 4: Controller reloads and inspects the live shell**
|
||||
|
||||
Deferred to the controller after code review; Task 7 does not reload or inspect
|
||||
the daily-driver shell.
|
||||
|
||||
Run:
|
||||
|
||||
|
||||
Reference in New Issue
Block a user