Context
tests/integration_test.rs::test_provenance_chain_integrity_multi_step
contains an assertion that bakes in the current broken behaviour:
let mut tampered = update1.clone();
tampered.actor = "evil-mallory".to_string();
assert!(
tampered.verify(),
"Actor is not part of hash — tamper to actor alone is invisible"
);
Once V-L2-C1 lands and includes actor in the hash, this assertion
will fail (correctly). The test must be flipped — the new comment
should say "Actor IS part of the hash; tamper to actor breaks
verification."
What to do
After V-L2-C1 merges:
-
Delete the four lines quoted above.
-
Replace with:
let mut tampered = update1.clone();
tampered.actor = "evil-mallory".to_string();
assert!(
!tampered.verify(),
"Tampering with actor must break verification"
);
-
Verify cargo test is green.
Acceptance
Context
tests/integration_test.rs::test_provenance_chain_integrity_multi_stepcontains an assertion that bakes in the current broken behaviour:
Once V-L2-C1 lands and includes
actorin the hash, this assertionwill fail (correctly). The test must be flipped — the new comment
should say "Actor IS part of the hash; tamper to actor breaks
verification."
What to do
After V-L2-C1 merges:
Delete the four lines quoted above.
Replace with:
Verify
cargo testis green.Acceptance
cargo testgreen