eterna2 / kest / 24166160940
92%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 48
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 88.71% (+1.5%) from 87.251%
24166160940

push

github

web-flow 
spec: formalize Kest v0.3.0 specification in versioned spec/ folder (#4)

* spec: move Kest v0.3.0 specification to versioned spec/ folder

- Move SPEC.md → spec/SPEC-v0.3.0.md (versioned filename for future revisions)
- Add spec/README.md as a version index table
- Add website/scripts/sync-spec.sh to automate sync to website content
- Update website/moon.yml build input to track spec/SPEC-v0.3.0.md
- Update website/content/design/07_kest_spec_v0.3.0.md (regenerated)
- Add prominent spec link in README.md (badges section)

Spec changes in this session:
- F-TS-02: ORIGIN_TRUST_MAP defaults are mandatory; custom mappings are allowed
- F-AE-13: policy_context MUST be present in every KestEntry (deviations auditable)
- F-CP-02/03: interceptor and propagator are deployment-agnostic (in-process or sidecar)
- F-CP-04: claim-check TTL risk noted; OTel collector rehydration processor recommended
- F-TE-04: lineage visualiser demoted to SHOULD; output format left to implementer
- §5.1: added mechanism descriptions for SPIREProvider, AWSWorkloadIdentity,
         OIDCIdentity, and BedrockAgentIdentity with authoritative references

* feat(spec): v0.3.0 compliance — Rust models, UUID v7, trust self_score, policy_context

Rust layer (models.rs, lib.rs):
- Add schema_version, KestRuntime, PolicyContext, PolicyDeviation to KestEntry
- Expose policy_context getter via PyO3 bridge (accepts dict, returns dict)
- All serialized entries now carry runtime + policy_context (F-AE-05/06/13)

Python layer (models.py):
- MAX_BAGGAGE_SIZE set to 4096 (F-CP-04)
- Remove silent .mock-sig. / .pending. bypass in PassportVerifier
- Add register_origin_trust() with protection of mandatory defaults (F-TS-02)
- Export register_origin_trust from kest.core public API

Python layer (decorators.py):
- Add _uuid7() — spec-compliant UUID v7 generator (F-AE-04)
- Both sync and async wrappers now use _uuid7() for entry_id
- self_score now correctly sourced from ORIGIN_TRUST_MAP for non-root no... (continued)

2255 of 2542 relevant lines covered (88.71%)

0.89 hits per line

Coverage Regressions

Lines Coverage ∆ File
32
83.21
 0.7% decorators.py
4
87.88
 -3.79% __init__.py
3
88.78
 2.91% models.py
2
94.12
 1.01% logic_test.py
Jobs
ID Job ID Ran Files Coverage
1 24166160940.1 48
88.71
 GitHub Action Run
Source Files on build 24166160940