30916344898
94%

Ran 04 Aug 2026 02:00PM UTC

Jobs 1

Files 24

Run time 1min

Badge

Embed ▾

Committed 04 Aug 2026 01:56PM UTC coverage: 95.143%. Remained the same

Build # 30916344898

Build Type

push

github

Committed by

web-flow

Commit Message

test(contract): add the §10.1 rule-8 guardrail regression tests (#43)

CONTRACT.md §10.1 rule 8 — "subject of the decision" — was the one part
of the local-verification set with no regression test outside PHP,
TypeScript and Python. §15.1 hand-verified that every guard rejects
correctly, so this closes a missing guardrail rather than a live defect.

Rules 1-7 ask whether the token is good. Rule 8 asks whether it is the
token the decision is even about. SEC-085 satisfied all seven and was
still an authentication bypass: the PHP guard routed a failed
verification into a second, successful one against the application's
own session, admitting the caller as the app's service account.

Each test asserts its precondition rather than assuming it: a second,
fully valid credential for a more privileged principal is first shown
to pass the same guard, so a fallback would genuinely have succeeded.
Without that, the tests would pass merely because nothing was available
to substitute — the trap the PHP reference test documents at length.

Every test was falsified by injecting the SEC-085 fallback into the
guard and confirming it fails.


Claude-Session: https://claude.ai/code/session_01SkTHvZQMV47t3UwkEtmB1D

Co-authored-by: Claude <noreply@anthropic.com>

Coverage Stats

4055 of 4262 relevant lines covered (95.14%)

15.38 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	30916344898.1	04 Aug 2026 02:00PM UTC	24	95.14	GitHub Action Run

ilpanich / axiam-rust-sdk / 30916344898
94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 30916344898

ilpanich / axiam-rust-sdk / 30916344898 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 30916344898

ilpanich / axiam-rust-sdk / 30916344898
94%

README BADGES
x