Orchestrata Ultimate › Tests › Reference › kernel › test_pam_enforcer_extended
Tests reference — tests/kernel/test_pam_enforcer_extended.py
Module of tests/kernel, split out because the directory page would be too large.
Prose pending.
tests/kernel/test_pam_enforcer_extended.py
source · 21 tests · 714 lines
Extended tests for kernel.pam_enforcer using real Prolog.
Covers: core.paths, kernel.pam_enforcer, governance.escalation_handler/ (package)
| Kind | Name | Line | Description |
|---|---|---|---|
| function | test_validate_authority_delegation_exception |
206 | Exception in _check_delegation falls back to DENIED. |
| function | test_validate_authority_owner_lookup_exception |
213 | Exception in _lookup_actual_owner falls back to DENIED with None owner. |
| function | test_check_ownership_temporary_exception |
221 | Exception in _check_temporary_ownership falls back to INVALID. |
| function | test_check_ownership_component_owner_lookup_exception |
228 | Exception in _lookup_actual_component_owner falls back to INVALID with None owner. |
| function | test_enforce_boundary_exception_query_exception |
236 | Exception during boundary exception check returns ALLOWED with exception_granted=False. |
| function | test_check_permission_grant_exception |
293 | Exception during grant_active check returns GRANTED (not temporary). |
| function | test_delegate_ownership_not_valid_owner |
352 | Owner with DELEGATED status cannot delegate further. |
| function | test_log_violation_exactly_at_max_no_truncation |
368 | Adding exactly MAX_VIOLATIONS_BEFORE_TRUNCATE entries does not truncate. |
| function | test_log_violation_one_over_max_triggers_truncation |
383 | Adding one over MAX_VIOLATIONS_BEFORE_TRUNCATE triggers eviction. |
| function | test_validate_authority_denied_with_graph |
402 | Authority denial is logged to Graph when configured. |
| function | test_enforce_boundary_denied_with_graph |
417 | Boundary denial is logged to Graph when configured. |
| function | test_check_permission_denied_with_graph |
432 | Permission denial is logged to Graph when configured. |
| function | test_detect_conflict_prolog_exception |
452 | Exception during conflict detection returns None. |
| function | test_get_escalation_path_prolog_exception |
465 | Exception during path query falls back to default U:Ox path. |
| function | test_get_escalation_path_priority_exception |
484 | Exception during priority query falls back to priority 1. |
| function | test_timeout_stale_in_progress |
557 | IN_PROGRESS escalations are also subject to timeout. |
| function | test_timeout_stale_rejected_ignored |
579 | REJECTED escalations are never timed out. |
| function | test_timeout_stale_no_timeout_at |
601 | Escalation with None timeout_at is not timed out. |
| function | test_timeout_stale_with_graph_only_logs_once |
623 | Each timed-out escalation logs exactly one Graph timeout entry. |
| function | test_route_escalation_empty_steps |
658 | route_escalation returns None when escalation path has no steps. |
| function | test_multi_hop_escalate_empty_path |
683 | multi_hop_escalate with empty path uses 'orchestrator' as starting volk. |