32908093550
94%

Ran 25 Aug 2026 10:53PM UTC

Jobs 1

Files 13

Run time 1min

Badge

Embed ▾

Committed 25 Aug 2026 10:51PM UTC coverage: 94.787%. Remained the same

Build # 32908093550

Build Type

push

github

Committed by

web-flow

Commit Message

fix(test): stop decrypt_returns_empty_for_tampered_ciphertext flaking (#48)

The test "tampered" the payload by overwriting index 20 with a literal 'X'
rather than flipping it to something different. Index 20 falls inside the
base64 of the random IV, so whenever that character was already 'X' the
tampered string was byte-identical to the original, decrypted perfectly well,
and the assertion failed with -'' +'secret'.

Base64 has a 64-character alphabet, so this failed roughly one run in
sixty-four. Measured against the real Encryption class over 20,000 encryptions:
320 no-op tampers, 1.60% - against the 1.56% a uniform distribution predicts -
and every one of those was a test failure. With the fix, 0 in 20,000.

It bit CI on run 32896150893 and a plain re-run went green, which is exactly
how this kind of defect hides.

The replacement is now chosen against the original character, which is already
the idiom used in reach - AttemptTokenMinterTest and SessionCookieTest both do
the same conditional flip. Concordance was the only place in the suite that
hardcoded it. Comment added so it is not "simplified" back.

Coverage Stats

1200 of 1266 relevant lines covered (94.79%)

6.95 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	32908093550.1	25 Aug 2026 10:53PM UTC	13	94.79	GitHub Action Run

bleedingdeacons / concordance / 32908093550
94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32908093550

bleedingdeacons / concordance / 32908093550 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32908093550

bleedingdeacons / concordance / 32908093550
94%

README BADGES
x