Skip to content

test(dogfood): the authz census and the matrix docblock read the runtime route ledger as the 92 rows it holds #24069

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
objectstack-fleet merged 2 commits into from
Oct 16, 2026
Merged

test(dogfood): the authz census and the matrix docblock read the runtime route ledger as the 92 rows it holds #24069

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
86ed872
test(dogfood): the authz census reads the runtime route ledger as the…
claude Oct 16, 2026
3888a39
test(dogfood): the matrix docblock states the runtime route ledger as…
claude Oct 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/qa/dogfood/test/authz-conformance.matrix.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
// dispatcher domain files.
//
// The population comes from `packages/rest/src/rest-route-ledger.ts` (81 rows
// / 18 families) and `packages/runtime/src/route-ledger.ts` (88 rows / 23
// / 18 families) and `packages/runtime/src/route-ledger.ts` (92 rows / 23
// domains) because those two are enumerated from a RUNNING server and guarded
// in both directions by their own conformance tests — so a new family or
// domain cannot be silently absent from them, and therefore cannot be silently
Expand Down
16 changes: 12 additions & 4 deletions packages/qa/dogfood/test/authz-probe-blind-spot.census.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -106,7 +106,7 @@
// `RestServer.getRoutes()` on a booted server and guarded per route by
// `rest-route-ledger.conformance.test.ts`. It reaches all 17 registrars;
// this table reaches 1.
// `packages/runtime/src/route-ledger.ts`: 88 rows over 23 domains. Its
// `packages/runtime/src/route-ledger.ts`: 92 rows over 23 domains. Its
// machine contract is DOMAIN-level, by live registry introspection
// (`domainRegistry.list()`), the per-route rows being documentation. It
// covers all 15 `async handle*(` methods in `http-dispatcher.ts` and all
Expand Down Expand Up @@ -469,11 +469,19 @@ export const PROBE_FILE_CENSUS: readonly ProbeFileReading[] = [
// `/security` domain dispatches to it — so the domain-file counts in the
// note below are unchanged. Controls moved with the row ("route: '" and
// "domain: '" 87 -> 88, RouteLedgerEntry unchanged at 2).
population: 88,
reachable: 88,
// [#23909] 88 -> 92: the `GET`, `PUT`, `PATCH` and `DELETE /keys` rows
// arrived with their mounts (every `/api/v1/keys` verb is mounted, so an
// anonymous caller is answered 401 on the standalone server). All four
// carry `domain: '/keys'`, the EXISTING key the `POST /keys` row already
// carries, so `reachable` moves with `population`, `blindSpot` stays 0 and
// `keys` stays 23 (23 distinct domains before and after, re-derived).
// Controls moved with the rows ("route: '" and "domain: '" 88 -> 92,
// RouteLedgerEntry unchanged at 2).
population: 92,
reachable: 92,
blindSpot: 0,
populationRule: 'ledger rows inside ROUTE_LEDGER; reachable = rows carrying a `domain` (each distinct value mints a key)',
controls: { "route: '": 88, "domain: '": 88, RouteLedgerEntry: 2 },
controls: { "route: '": 92, "domain: '": 92, RouteLedgerEntry: 2 },
// [#22432] Re-derived on the merged ref: the note's two counts had stood at
// 11 files / 5 classified / 16 baselined since before the `/analytics`
// domain was classified (#21061), which named one more file and moved one
Expand Down
Loading