Orchestrata Ultimate › Tests › Reference › kernel › test_policy_evaluator_real_rules
Tests reference — tests/kernel/test_policy_evaluator_real_rules.py
Module of tests/kernel, split out because the directory page would be too large.
Prose pending.
tests/kernel/test_policy_evaluator_real_rules.py
source · 13 tests · 253 lines
SPEC-007/SPEC-001 regression: PolicyEvaluator's 4-ary Prolog contract
Covers: kernel.dispatcher, kernel.policy_evaluator
| Kind | Name | Line | Description |
|---|---|---|---|
| function | test_tool_allowed_real_allow |
100 | An operational, unblocked volk reading a non-protected path is |
| function | test_tool_allowed_real_deny_unregistered_volk |
111 | A volk with no volk_exists fact at all is really denied — proves |
| function | test_tool_allowed_real_deny_blocked_action |
120 | agent_action_blocked/2 (the same block predicate may_execute/2 |
| function | test_policy_permits_real_allow |
138 | |
| function | test_policy_permits_real_deny_unregistered_sender |
148 | |
| function | test_check_constraint_ownership_real_valid |
161 | |
| function | test_check_constraint_ownership_real_invalid |
175 | |
| function | test_escalation_target_real_critical_escalates_to_human |
192 | |
| function | test_escalation_target_real_high_security_escalates_to_human |
199 | issue_security_related/1 (the same dynamic fact escalation_target/2 |
| function | test_escalation_target_real_high_non_security_escalates_to_senior_volk |
215 | |
| function | test_routing_decision_no_policy_result_denies_under_strict_by_default |
225 | |
| function | test_permission_level_no_policy_result_denies_under_strict_by_default |
235 | |
| function | test_routing_decision_no_policy_result_permissive_when_strict_false |
245 |