• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

Alan-Jowett / sonde / 23953864431
82%

Build:
DEFAULT BRANCH: main
Ran 03 Apr 2026 04:42PM UTC
Jobs 1
Files 85
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

03 Apr 2026 04:39PM UTC coverage: 85.6% (+0.02%) from 85.585%
23953864431

push

github

web-flow
docs: add missing APP_DATA AEAD validation test cases (#625)

* docs: add missing APP_DATA AEAD validation test cases

Closes #623

Adds test cases that would have caught the BPF HMAC-vs-AEAD framing
bug (#622). The validation specs previously had no tests verifying
that APP_DATA frames use the correct cryptographic authentication.

Gateway validation:
- T-0503a: APP_DATA with valid AEAD accepted (decrypts, routes to handler)
- T-0503b: APP_DATA with invalid GCM tag rejected (silent discard)
- T-0503c: APP_DATA with HMAC framing rejected by AEAD gateway

Node validation:
- T-N606a: BPF \send()\ produces AEAD-authenticated frame
- T-N606b: BPF \send_recv()\ AEAD round-trip
- T-N300: Clarified scope (HMAC path only, see T-N606a/b for AEAD)

E2E validation:
- T-E2E-032: APP_DATA AEAD end-to-end (BPF helper → AEAD frame →
  gateway decrypt → handler invocation)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

* test: implement APP_DATA AEAD validation test cases

Closes #623

Implements the test cases added to the validation specs in this branch:

Gateway (aead_engine.rs):
- T-0503a: APP_DATA with valid AEAD accepted and processed
- T-0503b: APP_DATA with corrupted GCM tag silently discarded
- T-0503c: APP_DATA with HMAC framing rejected by AEAD gateway

E2E harness fix (harness.rs):
- Remove APP_DATA→HMAC workaround in BridgeTransportAead — APP_DATA
  now routes through \process_frame_aead\ like all other frame types.
  This was masking the bug that #622/#624 fixed.
- T-E2E-051 now exercises the full AEAD APP_DATA path (serves as
  implementation of T-E2E-032).

Node-side tests (T-N606a, T-N606b) were already implemented in PR #624.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

---------

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>
Co-authored-by: Alan Jowett <alan.jowett@microsoft.com>
Co... (continued)

1 of 1 new or added line in 1 file covered. (100.0%)

4 existing lines in 1 file now uncovered.

27137 of 31702 relevant lines covered (85.6%)

135.34 hits per line

Coverage Regressions

Lines Coverage ∆ File
4
86.32
-0.38% crates/sonde-e2e/src/harness.rs
Jobs
ID Job ID Ran Files Coverage
1 23953864431.1 03 Apr 2026 04:42PM UTC 85
85.6
GitHub Action Run
Source Files on build 23953864431
  • Tree
  • List 85
  • Changed 2
  • Source Changed 1
  • Coverage Changed 2
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #23953864431
  • 92780f2c on github
  • Prev Build on main (#23932187908)
  • Next Build on main (#23956483934)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc