3 Commits
Author SHA1 Message Date
araharah-executor b06c64d5fc test(07-06): RED — SA6 doc-pointer static-text class vector (URL literals only; fetch targets to the same host still fail) 2026-10-25 05:15:57 +08:00
araharah-executor 7a1206d5c8 fix(07-03): fold the follow-up fixes described in 07-03-SUMMARY
- asset-header probe reads HTTP status BEFORE interpreting headers — a
  non-2xx is deployment drift (the notRun exit-2 class), never a cache
  violation; the violations.length count bug fixed
- XHTML namespace URI joins the SVG spec-identifier adjudication
- probeUnavailable carries the reason only (the CLI prints NOT RUN)
- CP2/AU1 suite vectors updated to the corrected contracts

Residue note: these edits were on the tree during 07-03/07-04 execution
but escaped those plans' commits (07-04-SUMMARY residue caution).
2026-10-25 05:15:38 +08:00
araharah-executor 87fcb2833e test(07-03): privacy-audit gate suite — SA/BG/CP/AU vectors, RED before the gates exist
- SA1-5: each source gate returns {id, pass, evidence}, passes the current
  tree, and FAILS a synthetic violation via injected fixture roots
- BG1-2: production web/dist only; missing build is notRun (never a pass)
- CP1-2: probeUnavailable exact shape + credentials-absent degradation
- AU1-3: CLI exit 0/1/2 — CLEAN on this tree, FAILED on a fixture root
  (PRIVACY_AUDIT_ROOT), NOT RUN for --live without credentials
2026-10-25 04:33:12 +08:00