[INFO] cloning repository https://github.com/777genius/lintai [INFO] running `Command { std: "git" "-c" "credential.helper=" "-c" "credential.helper=/workspace/cargo-home/bin/git-credential-null" "clone" "--bare" "https://github.com/777genius/lintai" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2F777genius%2Flintai", kill_on_drop: false }` [INFO] [stderr] Cloning into bare repository '/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2F777genius%2Flintai'... [INFO] running `Command { std: "git" "rev-parse" "HEAD", kill_on_drop: false }` [INFO] [stdout] 755ed8ce2ef4124198e88675cca985ae59989ef7 [INFO] testing 777genius/lintai against 1.99.0-beta.8 for beta-1.100-4 [INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2F777genius%2Flintai" "/workspace/builds/worker-2-tc1/source", kill_on_drop: false }` [INFO] [stderr] Cloning into '/workspace/builds/worker-2-tc1/source'... [INFO] [stderr] done. [INFO] removed /workspace/builds/worker-2-tc1/source/rust-toolchain.toml [INFO] started tweaking git repo https://github.com/777genius/lintai [INFO] finished tweaking git repo https://github.com/777genius/lintai [INFO] tweaked toml for git repo https://github.com/777genius/lintai written to /workspace/builds/worker-2-tc1/source/Cargo.toml [INFO] validating manifest of git repo https://github.com/777genius/lintai on toolchain 1.99.0-beta.8 [INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+1.99.0-beta.8" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }` [INFO] crate git repo https://github.com/777genius/lintai already has a lockfile, it will not be regenerated [INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+1.99.0-beta.8" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }` [INFO] [stderr] Updating crates.io index [INFO] [stderr] Downloading crates ... [INFO] [stderr] Downloaded unsafe-libyaml-norway v0.2.15 [INFO] [stderr] Downloaded saphyr-parser-bw v0.0.610 [INFO] [stderr] Downloaded serde_yaml_bw v2.5.3 [INFO] [stderr] Downloaded web-sys v0.3.92 [INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-2-tc1/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-2-tc1/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-m" "1610612736" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:77db811e55d90add9212f6832c23229e3de5f1c1f9905e8cb07319ea15df73ac" "sleep" "infinity", kill_on_drop: false }` [INFO] [stdout] c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f [INFO] running `Command { std: "docker" "start" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f", kill_on_drop: false }` [INFO] running `Command { std: "docker" "inspect" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-w" "/opt/rustwide/workdir" "--user" "0:0" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f" "/opt/rustwide/cargo-home/bin/cargo" "+1.99.0-beta.8" "metadata" "--no-deps" "--format-version=1", kill_on_drop: false }` [INFO] running `Command { std: "docker" "inspect" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f" "/opt/rustwide/cargo-home/bin/cargo" "+1.99.0-beta.8" "build" "--frozen" "--message-format=json", kill_on_drop: false }` [INFO] [stderr] Compiling proc-macro2 v1.0.106 [INFO] [stderr] Compiling quote v1.0.45 [INFO] [stderr] Compiling unicode-ident v1.0.24 [INFO] [stderr] Compiling serde_core v1.0.228 [INFO] [stderr] Compiling memchr v2.8.0 [INFO] [stderr] Compiling serde v1.0.228 [INFO] [stderr] Compiling zmij v1.0.21 [INFO] [stderr] Compiling ref-cast v1.0.25 [INFO] [stderr] Compiling serde_json v1.0.149 [INFO] [stderr] Compiling itoa v1.0.18 [INFO] [stderr] Compiling dyn-clone v1.0.20 [INFO] [stderr] Compiling regex-syntax v0.8.10 [INFO] [stderr] Compiling autocfg v1.5.0 [INFO] [stderr] Compiling hashbrown v0.16.1 [INFO] [stderr] Compiling equivalent v1.0.2 [INFO] [stderr] Compiling thiserror v2.0.18 [INFO] [stderr] Compiling crossbeam-utils v0.8.21 [INFO] [stderr] Compiling smallvec v1.15.1 [INFO] [stderr] Compiling arraydeque v0.5.1 [INFO] [stderr] Compiling log v0.4.29 [INFO] [stderr] Compiling base64 v0.22.1 [INFO] [stderr] Compiling unsafe-libyaml-norway v0.2.15 [INFO] [stderr] Compiling semver v1.0.27 [INFO] [stderr] Compiling winnow v0.7.15 [INFO] [stderr] Compiling same-file v1.0.6 [INFO] [stderr] Compiling toml_write v0.1.2 [INFO] [stderr] Compiling walkdir v2.5.0 [INFO] [stderr] Compiling num-traits v0.2.19 [INFO] [stderr] Compiling aho-corasick v1.1.4 [INFO] [stderr] Compiling bstr v1.12.1 [INFO] [stderr] Compiling crossbeam-epoch v0.9.18 [INFO] [stderr] Compiling indexmap v2.13.0 [INFO] [stderr] Compiling syn v2.0.117 [INFO] [stderr] Compiling crossbeam-deque v0.8.6 [INFO] [stderr] Compiling regex-automata v0.4.14 [INFO] [stderr] Compiling serde_derive_internals v0.29.1 [INFO] [stderr] Compiling serde_derive v1.0.228 [INFO] [stderr] Compiling ref-cast-impl v1.0.25 [INFO] [stderr] Compiling thiserror-impl v2.0.18 [INFO] [stderr] Compiling schemars_derive v1.2.1 [INFO] [stderr] Compiling saphyr-parser-bw v0.0.610 [INFO] [stderr] Compiling regex v1.12.3 [INFO] [stderr] Compiling globset v0.4.18 [INFO] [stderr] Compiling ignore v0.4.25 [INFO] [stderr] Compiling schemars v1.2.1 [INFO] [stderr] Compiling toml_datetime v0.6.11 [INFO] [stderr] Compiling serde_spanned v0.6.9 [INFO] [stderr] Compiling serde_yaml_bw v2.5.3 [INFO] [stderr] Compiling toml_edit v0.22.27 [INFO] [stderr] Compiling lintai-api v0.1.0 (/opt/rustwide/workdir/crates/lintai-api) [INFO] [stderr] Compiling lintai-policy v0.0.0 (/opt/rustwide/workdir/crates/lintai-policy) [INFO] [stderr] Compiling lintai-dep-vulns v0.0.0 (/opt/rustwide/workdir/crates/lintai-dep-vulns) [INFO] [stderr] Compiling lintai-ai-security v0.0.0 (/opt/rustwide/workdir/crates/lintai-ai-security) [INFO] [stderr] Compiling lintai-parse v0.0.0 (/opt/rustwide/workdir/crates/lintai-parse) [INFO] [stderr] Compiling lintai-runtime v0.0.0 (/opt/rustwide/workdir/crates/lintai-runtime) [INFO] [stderr] Compiling lintai-fix v0.0.0 (/opt/rustwide/workdir/crates/lintai-fix) [INFO] [stderr] Compiling lintai-adapters v0.0.0 (/opt/rustwide/workdir/crates/lintai-adapters) [INFO] [stderr] Compiling toml v0.8.23 [INFO] [stderr] Compiling lintai-builtins v0.0.0 (/opt/rustwide/workdir/crates/lintai-builtins) [INFO] [stderr] Compiling lintai-engine v0.0.0 (/opt/rustwide/workdir/crates/lintai-engine) [INFO] [stderr] Compiling lintai-cli v0.1.3 (/opt/rustwide/workdir/crates/lintai-cli) [INFO] [stderr] Compiling lintai-testing v0.1.0 (/opt/rustwide/workdir/crates/lintai-testing) [INFO] [stderr] Finished `dev` profile [unoptimized + debuginfo] target(s) in 40.65s [INFO] running `Command { std: "docker" "inspect" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f" "/opt/rustwide/cargo-home/bin/cargo" "+1.99.0-beta.8" "test" "--frozen" "--no-run" "--message-format=json", kill_on_drop: false }` [INFO] [stderr] Compiling crossbeam-utils v0.8.21 [INFO] [stderr] Compiling syn v2.0.117 [INFO] [stderr] Compiling libc v0.2.183 [INFO] [stderr] Compiling cfg-if v1.0.4 [INFO] [stderr] Compiling zerocopy v0.8.47 [INFO] [stderr] Compiling getrandom v0.3.4 [INFO] [stderr] Compiling once_cell v1.21.4 [INFO] [stderr] Compiling getrandom v0.4.2 [INFO] [stderr] Compiling rustix v1.1.4 [INFO] [stderr] Compiling linux-raw-sys v0.12.1 [INFO] [stderr] Compiling bitflags v2.11.0 [INFO] [stderr] Compiling either v1.15.0 [INFO] [stderr] Compiling rayon-core v1.13.0 [INFO] [stderr] Compiling fastrand v2.4.1 [INFO] [stderr] Compiling plotters-backend v0.3.7 [INFO] [stderr] Compiling clap_lex v1.1.0 [INFO] [stderr] Compiling anstyle v1.0.14 [INFO] [stderr] Compiling ciborium-io v0.2.2 [INFO] [stderr] Compiling plotters-svg v0.3.7 [INFO] [stderr] Compiling quick-error v1.2.3 [INFO] [stderr] Compiling fnv v1.0.7 [INFO] [stderr] Compiling cast v0.3.0 [INFO] [stderr] Compiling bit-vec v0.8.0 [INFO] [stderr] Compiling plotters v0.3.7 [INFO] [stderr] Compiling clap_builder v4.6.0 [INFO] [stderr] Compiling anes v0.1.6 [INFO] [stderr] Compiling unarray v0.1.4 [INFO] [stderr] Compiling oorandom v11.1.5 [INFO] [stderr] Compiling itertools v0.10.5 [INFO] [stderr] Compiling bit-set v0.8.0 [INFO] [stderr] Compiling crossbeam-epoch v0.9.18 [INFO] [stderr] Compiling crossbeam-deque v0.8.6 [INFO] [stderr] Compiling ignore v0.4.25 [INFO] [stderr] Compiling wait-timeout v0.2.1 [INFO] [stderr] Compiling is-terminal v0.4.17 [INFO] [stderr] Compiling rand_core v0.9.5 [INFO] [stderr] Compiling rand v0.9.2 [INFO] [stderr] Compiling rand_xorshift v0.4.0 [INFO] [stderr] Compiling rayon v1.11.0 [INFO] [stderr] Compiling criterion-plot v0.5.0 [INFO] [stderr] Compiling clap v4.6.0 [INFO] [stderr] Compiling tempfile v3.27.0 [INFO] [stderr] Compiling rusty-fork v0.3.1 [INFO] [stderr] Compiling serde_derive_internals v0.29.1 [INFO] [stderr] Compiling serde_derive v1.0.228 [INFO] [stderr] Compiling ref-cast-impl v1.0.25 [INFO] [stderr] Compiling thiserror-impl v2.0.18 [INFO] [stderr] Compiling zerocopy-derive v0.8.47 [INFO] [stderr] Compiling ref-cast v1.0.25 [INFO] [stderr] Compiling schemars_derive v1.2.1 [INFO] [stderr] Compiling thiserror v2.0.18 [INFO] [stderr] Compiling saphyr-parser-bw v0.0.610 [INFO] [stderr] Compiling serde v1.0.228 [INFO] [stderr] Compiling schemars v1.2.1 [INFO] [stderr] Compiling serde_yaml_bw v2.5.3 [INFO] [stderr] Compiling toml_datetime v0.6.11 [INFO] [stderr] Compiling serde_spanned v0.6.9 [INFO] [stderr] Compiling tinytemplate v1.2.1 [INFO] [stderr] Compiling toml_edit v0.22.27 [INFO] [stderr] Compiling lintai-api v0.1.0 (/opt/rustwide/workdir/crates/lintai-api) [INFO] [stderr] Compiling half v2.7.1 [INFO] [stderr] Compiling ppv-lite86 v0.2.21 [INFO] [stderr] Compiling lintai-parse v0.0.0 (/opt/rustwide/workdir/crates/lintai-parse) [INFO] [stderr] Compiling lintai-policy v0.0.0 (/opt/rustwide/workdir/crates/lintai-policy) [INFO] [stderr] Compiling lintai-ai-security v0.0.0 (/opt/rustwide/workdir/crates/lintai-ai-security) [INFO] [stderr] Compiling lintai-dep-vulns v0.0.0 (/opt/rustwide/workdir/crates/lintai-dep-vulns) [INFO] [stderr] Compiling lintai-runtime v0.0.0 (/opt/rustwide/workdir/crates/lintai-runtime) [INFO] [stderr] Compiling lintai-fix v0.0.0 (/opt/rustwide/workdir/crates/lintai-fix) [INFO] [stderr] Compiling rand_chacha v0.9.0 [INFO] [stderr] Compiling lintai-adapters v0.0.0 (/opt/rustwide/workdir/crates/lintai-adapters) [INFO] [stderr] Compiling proptest v1.11.0 [INFO] [stderr] Compiling ciborium-ll v0.2.2 [INFO] [stderr] Compiling toml v0.8.23 [INFO] [stderr] Compiling ciborium v0.2.2 [INFO] [stderr] Compiling criterion v0.5.1 [INFO] [stderr] Compiling lintai-builtins v0.0.0 (/opt/rustwide/workdir/crates/lintai-builtins) [INFO] [stderr] Compiling lintai-engine v0.0.0 (/opt/rustwide/workdir/crates/lintai-engine) [INFO] [stderr] Compiling lintai-testing v0.1.0 (/opt/rustwide/workdir/crates/lintai-testing) [INFO] [stderr] Compiling lintai-cli v0.1.3 (/opt/rustwide/workdir/crates/lintai-cli) [INFO] [stderr] Finished `test` profile [unoptimized + debuginfo] target(s) in 53.85s [INFO] running `Command { std: "docker" "inspect" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f", kill_on_drop: false }` [INFO] running `Command { std: "docker" "exec" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=warn" "-e" "RUSTDOCFLAGS=--cap-lints=warn" "-w" "/opt/rustwide/workdir" "--user" "0:0" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f" "/opt/rustwide/cargo-home/bin/cargo" "+1.99.0-beta.8" "test" "--frozen", kill_on_drop: false }` [INFO] [stderr] Finished `test` profile [unoptimized + debuginfo] target(s) in 0.20s [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_adapters-ea5c84064ee4e7b8) [INFO] [stdout] [INFO] [stdout] running 21 tests [INFO] [stdout] test tests::artifact_kind_routes_are_unique_for_shipped_surfaces ... ok [INFO] [stdout] test tests::every_detection_rule_resolves_to_a_surface_spec ... ok [INFO] [stdout] test tests::rejects_unterminated_frontmatter ... ok [INFO] [stdout] test tests::parses_json_semantics_for_npm_shrinkwrap ... ok [INFO] [stdout] test tests::classifies_code_blocks_and_html_comments ... ok [INFO] [stdout] test tests::parses_json_semantics_for_local_claude_settings ... ok [INFO] [stdout] test tests::keeps_multiline_html_comment_as_single_region ... ok [INFO] [stdout] test tests::parses_json_semantics_for_npm_package_lock ... ok [INFO] [stdout] test tests::parses_json_semantics_for_claude_settings ... ok [INFO] [stdout] test tests::surface_specs_assemble_in_fixed_order ... ok [INFO] [stdout] test tests::parses_json_semantics_for_devcontainer_config ... ok [INFO] [stdout] test tests::parses_yaml_semantics_for_github_workflow ... ok [INFO] [stdout] test tests::parses_shell_semantics_for_dockerfile ... ok [INFO] [stdout] test tests::invalid_yaml_frontmatter_stays_parseable_without_semantics ... ok [INFO] [stdout] test tests::parses_json_semantics_for_package_manifest ... ok [INFO] [stdout] test tests::parses_yaml_semantics_for_docker_compose ... ok [INFO] [stdout] test tests::supports_bom_prefixed_frontmatter ... ok [INFO] [stdout] test tests::parses_json_semantics_for_mcp ... ok [INFO] [stdout] test tests::surface_specs_are_unique_by_id_and_surface_pair ... ok [INFO] [stdout] test tests::parses_yaml_semantics_for_pnpm_lock ... ok [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_ai_security-96dff2f07d675730) [INFO] [stdout] test tests::keeps_frontmatter_as_a_region_and_semantics ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 21 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 921 tests [INFO] [stdout] test corpus_tests::benign::benign_corpus_case_dirs_are_discoverable ... ok [INFO] [stdout] test corpus_tests::edge::checked_in_edge_case_dirs_are_discoverable ... ok [INFO] [stdout] test corpus_tests::malicious::malicious_corpus_case_dirs_are_discoverable ... ok [INFO] [stdout] test json_locator::tests::records_boolean_value_spans ... ok [INFO] [stdout] test json_locator::tests::records_string_value_and_key_spans ... ok [INFO] [stdout] test json_locator::tests::tolerates_jsonc_comments_while_preserving_spans ... ok [INFO] [stdout] test native_catalog::tests::native_catalog_entries_convert_to_shared_catalog_entries ... ok [INFO] [stdout] test native_catalog::tests::shared_catalog_entries_stay_in_sync_with_native_catalog_entries ... ok [INFO] [stdout] test perf_tests::hook_provider_perf_budget_stays_single_pass ... ok [INFO] [stdout] test perf_tests::json_provider_perf_budget_stays_single_pass ... ok [INFO] [stdout] test perf_tests::markdown_provider_perf_budget_stays_single_pass ... ok [INFO] [stdout] test corpus_tests::edge::generated_symlink_escape_case_reports_outside_root_read_error ... ok [INFO] [stdout] test corpus_tests::benign::policy_truthful_workspace_stays_clean ... ok [INFO] [stdout] test perf_tests::sample_repo_perf_smoke_benchmark_reports_real_workloads ... ignored, manual perf smoke benchmark; run explicitly when profiling provider growth [INFO] [stdout] test perf_tests::sample_repo_perf_smoke_covers_expected_workloads ... ok [INFO] [stdout] test provider::tests::provider_profile_respects_active_rule_codes ... ok [INFO] [stdout] test signals::shared::markdown::launcher::tests::distinguishes_remote_install_instructions_from_security_guidance ... ok [INFO] [stdout] test signals::shared::markdown::launcher::tests::ignores_remote_bridge_cli_example ... ok [INFO] [stdout] test signals::shared::markdown::launcher::tests::ignores_remote_bridge_mcp_config_example ... ok [INFO] [stdout] test signals::shared::markdown::launcher::tests::recognizes_excluded_bridge_packages ... ok [INFO] [stdout] test signals::shared::markdown::launcher::tests::still_detects_real_mutable_mcp_server_package ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::detects_uv_preference_markers ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_branch_pinned_pip_git_install_as_mutable ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_bun_http_registry ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_bun_http_source ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_cargo_http_git_install ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_cargo_http_git_install_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_cargo_http_index ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_cargo_http_index_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_claude_bare_pip_install_in_transcript ... ok [INFO] [stdout] test corpus_tests::malicious::policy_exec_network_mismatch_emits_preview_evidence ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_http_clone_with_depth_flag ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_http_remote_add ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_http_remote_add_with_flag ... ok [INFO] [stdout] test corpus_tests::malicious::policy_frontmatter_conflict_emits_preview_evidence ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_inline_sslverify_false_fetch ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_ssl_no_verify_env ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_ssl_no_verify_env_true ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_sslverify_false ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_sslverify_false_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_network_tls_bypass_with_curl_insecure ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_network_tls_bypass_with_invoke_webrequest_skip_certificate_check ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_http_clone ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_git_inline_sslverify_false ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_network_tls_bypass_with_node_tls_reject_unauthorized ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_npm_config_http_registry ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_network_tls_bypass_with_wget_no_check_certificate ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_npm_http_registry_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_npm_strict_ssl_false ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_npm_http_source ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_npm_http_registry ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip3_config_http_find_links_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_config_http_index ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_config_trusted_host ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_http_find_links_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_config_http_find_links ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_http_find_links_short_flag ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_http_git_install ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_http_index_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_http_index ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_http_source ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_trusted_host ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pnpm_http_source ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pnpm_strict_ssl_false_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_python_dash_m_pip_config_http_extra_index_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_python_dash_m_pip_config_trusted_host_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_python_dash_m_pip_http_git_install ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_python_dash_m_pip_http_source ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_unpinned_pip_git_install ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_yarn_config_http_registry_equals_form ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_yarn_http_registry ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_http_find_links ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_pip_http_index_short_flag ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_yarn_http_source ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_cargo_https_git_install ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_commit_pinned_pip_git_install ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::finds_yarn_strict_ssl_false ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_git_https_clone ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_git_https_remote_add ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_git_inline_sslverify_false_in_safety_guidance ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_git_inline_sslverify_true ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_cargo_https_index ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_git_ssl_no_verify_disabled ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_git_ssl_no_verify_in_safety_guidance ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_git_sslverify_true ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_network_tls_bypass_in_safety_guidance ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_non_pip_trusted_host ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_npm_http_registry_for_direct_source_rule ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_git_sslverify_false_in_safety_guidance ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_npm_https_source ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_npm_https_registry ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pip_config_https_index ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pip_config_unrelated_key ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pip_http_index_for_direct_source_rule ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pip_https_find_links ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pip_https_git_install_for_http_git_rule ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pip_https_index ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pip_https_source ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pnpm_config_https_registry ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_powershell_network_tls_bypass_in_safety_guidance ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_secure_network_command ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_uv_pip_install_in_transcript ... ok [INFO] [stdout] test signals::shared::markdown::paths::tests::extracts_relative_target_from_markdown_link_token ... ok [INFO] [stdout] test signals::shared::markdown::paths::tests::keeps_parent_escape_env_access_unsafe ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_npm_strict_ssl_true ... ok [INFO] [stdout] test signals::shared::markdown::package_manager::tests::ignores_pip_config_https_find_links ... ok [INFO] [stdout] test signals::shared::markdown::paths::tests::treats_repo_local_markdown_link_target_as_safe ... ok [INFO] [stdout] test signals::shared::markdown::paths::tests::keeps_sensitive_repo_local_parent_targets_unsafe ... ok [INFO] [stdout] test signals::shared::markdown::paths::tests::treats_generic_repo_local_parent_references_as_safe ... ok [INFO] [stdout] test signals::tests::docker_compose_signals_capture_mutable_registry_image ... ok [INFO] [stdout] test signals::tests::docker_compose_signals_capture_privileged_runtime ... ok [INFO] [stdout] test signals::tests::docker_compose_signals_ignore_digest_pinned_registry_image ... ok [INFO] [stdout] test signals::tests::docker_compose_signals_capture_latest_image ... ok [INFO] [stdout] test signals::tests::docker_compose_signals_ignore_safe_service_runtime ... ok [INFO] [stdout] test signals::tests::dockerfile_signals_capture_final_stage_root_user_only ... ok [INFO] [stdout] test signals::shared::markdown::paths::tests::treats_repo_local_reference_markdown_as_safe ... ok [INFO] [stdout] test signals::tests::dockerfile_signals_capture_mutable_registry_image ... ok [INFO] [stdout] test corpus_tests::malicious::container_host_exposure_threat_review_cases_trigger_expected_findings ... ok [INFO] [stdout] test signals::tests::dockerfile_signals_capture_run_download_exec ... ok [INFO] [stdout] test signals::tests::dockerfile_signals_ignore_digest_pinned_registry_image ... ok [INFO] [stdout] test signals::tests::dockerfile_signals_ignore_root_before_final_nonroot_drop ... ok [INFO] [stdout] test signals::tests::dockerfile_signals_ignore_stage_alias_for_latest_rule ... ok [INFO] [stdout] test signals::tests::hook_signals_ignore_comments_and_keep_precise_spans ... ok [INFO] [stdout] test signals::tests::json_signals_capture_literal_secret_and_dangerous_host ... ok [INFO] [stdout] test signals::tests::json_signals_resolve_multiple_observations_from_one_locator ... ok [INFO] [stdout] test signals::tests::dockerfile_signals_ignore_explicit_version_tag_for_latest_rule ... ok [INFO] [stdout] test signals::tests::markdown_signals_skip_fenced_code_blocks ... ok [INFO] [stdout] test signals::tests::markdown_signals_capture_private_key_and_fenced_pipe_shell ... ok [INFO] [stdout] test corpus_tests::benign::container_host_exposure_threat_review_cases_stay_clean_when_safe ... ok [INFO] [stdout] test signals::tests::docker_compose_signals_ignore_explicit_version_tag_for_latest_rule ... ok [INFO] [stdout] test signals::tests::dockerfile_signals_capture_latest_base_image ... ok [INFO] [stdout] test corpus_tests::edge::generated_crlf_case_stays_clean ... ok [INFO] [stdout] test corpus_tests::edge::generated_invalid_utf8_case_reports_invalid_utf8_runtime_error ... ok [INFO] [stdout] test tests::claude_settings::existing_mcp_rules_apply_to_claude_mcp_json_variants ... ok [INFO] [stdout] test corpus_tests::malicious::hook_plain_http_secret_exfil_triggers_both_rules ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_bash_wildcard ... ok [INFO] [stdout] test tests::claude_settings::existing_mcp_rules_apply_to_vscode_mcp_json_variants ... ok [INFO] [stdout] test tests::claude_settings::finds_broad_env_file_in_expanded_mcp_client_config ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_bunx_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_curl_permission ... ok [INFO] [stdout] test tests::claude_settings::existing_mcp_rules_apply_to_gemini_extension_variants ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_dangerous_http_hook_host ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_command_hook_missing_timeout ... ok [INFO] [stdout] test corpus_tests::benign::mixed_clean_workspace_stays_clean ... ok [INFO] [stdout] test tests::claude_settings::finds_anthropic_strict_open_input_schema ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_edit_wildcard ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_api_post_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_api_put_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_enabled_mcpjson_servers ... ok [INFO] [stdout] test tests::claude_settings::avoids_duplicate_sensitive_env_reference_when_credential_key_passthrough_exists ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_bypass_permissions ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_edit_unsafe_path ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_api_patch_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_external_absolute_hook_command ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_api_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_issue_create_permission ... ok [INFO] [stdout] test corpus_tests::benign::package_manifest_supply_chain_cases_stay_clean_when_safe ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_repo_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_release_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_repo_create_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_repo_transfer_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_pr_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_repo_edit_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_release_upload_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_release_create_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_secret_set_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_am_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_secret_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_variable_set_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_branch_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_variable_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_workflow_disable_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_gh_workflow_run_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_clone_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_add_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_ls_remote_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_fetch_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_merge_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_config_permission ... ok [INFO] [stdout] test corpus_tests::edge::checked_in_edge_cases_match_expected_runtime_behavior ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_restore_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_apply_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_commit_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_reset_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_stash_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_clean_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_checkout_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_cherry_pick_permission ... ok [INFO] [stdout] test corpus_tests::malicious::package_manifest_supply_chain_cases_trigger_expected_findings ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_glob_unsafe_path ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_push_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_home_directory_hook_command ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_grep_wildcard ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_glob_wildcard ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_missing_schema ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_missing_matcher_on_pre_tool_use ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_missing_matcher_on_post_tool_use ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_matcher_on_stop_event ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_insecure_http_hook_url ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_pipx_run_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_matcher_on_notification_event ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_inline_download_exec ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_network_tls_bypass ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_rebase_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_git_tag_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_read_wildcard ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_grep_unsafe_path ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_npm_exec_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_pnpm_dlx_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_unscoped_edit ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_mutable_launcher ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_read_unsafe_path ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_python_m_pip_install_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_npx_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_unscoped_webfetch ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_unscoped_bash ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_unscoped_read ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_unscoped_write ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_unscoped_grep ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_write_unsafe_path ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_unscoped_glob ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_webfetch_wildcard ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_webfetch_raw_githubusercontent_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_unscoped_websearch ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_write_wildcard ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_uvx_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_package_install_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_websearch_wildcard ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_pip_install_permission ... ok [INFO] [stdout] test perf_tests::sample_repo_perf_metrics_snapshot_matches_checked_in ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_wget_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_github_workflow_pull_request_target_head_checkout ... ok [INFO] [stdout] test tests::claude_settings::finds_claude_settings_yarn_dlx_permission ... ok [INFO] [stdout] test tests::claude_settings::finds_cursor_plugin_unsafe_path ... ok [INFO] [stdout] test tests::claude_settings::finds_github_workflow_direct_run_interpolation ... ok [INFO] [stdout] test tests::claude_settings::finds_json_url_userinfo_static_auth_exposure ... ok [INFO] [stdout] test tests::claude_settings::finds_github_workflow_write_all_permissions ... ok [INFO] [stdout] test tests::claude_settings::finds_mcp_credential_env_passthrough_in_object_shaped_servers_map ... ok [INFO] [stdout] test tests::claude_settings::finds_github_workflow_unpinned_third_party_action ... ok [INFO] [stdout] test perf_tests::sample_repo_perf_baselines_allow_current_workloads ... ok [INFO] [stdout] test tests::claude_settings::finds_mcp_tool_missing_machine_fields ... ok [INFO] [stdout] test tests::claude_settings::finds_json_dangerous_endpoint_host_literal ... ok [INFO] [stdout] test tests::claude_settings::finds_github_workflow_write_capable_third_party_action ... ok [INFO] [stdout] test tests::claude_settings::finds_plain_http_endpoint ... ok [INFO] [stdout] test tests::claude_settings::finds_project_policy_exec_and_network_mismatch ... ok [INFO] [stdout] test tests::claude_settings::finds_openai_strict_missing_recursive_additional_properties ... ok [INFO] [stdout] test tests::claude_settings::finds_plugin_hook_network_tls_bypass ... ok [INFO] [stdout] test tests::claude_settings::finds_insecure_skip_verify_config ... ok [INFO] [stdout] test tests::claude_settings::finds_server_json_auth_header_policy_mismatch ... ok [INFO] [stdout] test tests::claude_settings::finds_hidden_instruction_in_json_description ... ok [INFO] [stdout] test tests::claude_settings::finds_plugin_hook_mutable_launcher ... ok [INFO] [stdout] test tests::claude_settings::finds_sensitive_env_reference_passthrough ... ok [INFO] [stdout] test tests::claude_settings::finds_server_json_literal_auth_header ... ok [INFO] [stdout] test tests::claude_settings::finds_openai_strict_required_coverage_gap ... ok [INFO] [stdout] test tests::claude_settings::finds_server_json_insecure_remote_url ... ok [INFO] [stdout] test tests::claude_settings::finds_duplicate_mcp_tool_names ... ok [INFO] [stdout] test tests::claude_settings::fixture_like_tool_json_paths_do_not_emit_tool_descriptor_findings ... ok [INFO] [stdout] test tests::claude_settings::finds_server_json_unresolved_header_variable ... ok [INFO] [stdout] test tests::claude_settings::fixture_like_gemini_paths_do_not_emit_mcp_findings ... ok [INFO] [stdout] test tests::claude_settings::finds_skill_frontmatter_conflict_with_project_policy ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_command_hook_with_timeout ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_bypass_permissions_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_bunx_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_bash_wildcard_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::finds_shell_wrapper_when_shell_is_first_arg ... ok [INFO] [stdout] test tests::claude_settings::finds_mcp_credential_env_passthrough ... ok [INFO] [stdout] test tests::claude_settings::fixture_like_expanded_mcp_paths_do_not_emit_mcp_findings ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_curl_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::finds_server_json_unresolved_remote_variable ... ok [INFO] [stdout] test tests::claude_settings::finds_json_literal_authorization_static_auth_exposure ... ok [INFO] [stdout] test tests::claude_settings::finds_suspicious_remote_endpoint ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_external_absolute_hook_command_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_curl_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::finds_shell_wrapper_in_mcp_config ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_am_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_gh_pr_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_branch_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::finds_trust_verification_disabled_config ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_gh_pr_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_edit_wildcard_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_add_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_empty_enabled_mcpjson_servers ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_branch_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_checkout_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::finds_plugin_hook_inline_download_exec ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_add_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_clean_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_checkout_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_apply_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_enabled_mcpjson_servers_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_cherry_pick_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_config_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_ls_remote_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_fetch_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_clone_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_commit_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_commit_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_ls_remote_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_config_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_restore_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_clone_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_tag_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_merge_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_reset_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_fetch_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::finds_shell_wrapper_in_object_shaped_servers_map ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_push_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_stash_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_https_hook_urls ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_rebase_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_tag_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_insecure_http_hook_url_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_home_directory_redirect_without_home_prefix_command ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_home_directory_hook_command_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_matcher_on_pre_tool_use ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_invalid_hook_matcher_event_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_glob_wildcard_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_matcher_on_post_tool_use ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_push_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_git_stash_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_missing_hook_timeout_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_loopback_http_hook_urls ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_grep_wildcard_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_missing_required_hook_matcher_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_missing_schema_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_missing_matcher_when_present ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_non_bypass_default_mode ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_npx_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_pipx_run_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_repo_local_edit_scope ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_npm_exec_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_project_scoped_hook_command ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_bash_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_package_install_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_pnpm_dlx_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_read_wildcard_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_repo_local_grep_scope ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_repo_local_write_scope ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_repo_local_read_scope ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_repo_local_glob_scope ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_glob_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_read_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_grep_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_missing_matcher_on_stop_event ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_bash_permission_without_npx ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_websearch_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_unscoped_websearch_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_webfetch_specific_safe_domain ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_webfetch_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_webfetch_wildcard_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_package_command_without_install ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_edit_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_unscoped_tool_family_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_system_shell_launcher_hook_command ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_wget_permission_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_uvx_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_specific_write_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_websearch_wildcard_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_unscoped_websearch_when_wildcard_form_used ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_yarn_dlx_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_write_wildcard_on_fixture_like_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_wget_permission_when_command_is_more_specific ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_with_schema ... ok [INFO] [stdout] test tests::claude_settings::ignores_github_workflow_pinned_third_party_action ... ok [INFO] [stdout] test tests::claude_settings::ignores_json_dynamic_authorization_placeholder ... ok [INFO] [stdout] test tests::claude_settings::ignores_non_dotenv_env_file_in_expanded_mcp_client_config ... ok [INFO] [stdout] test tests::claude_settings::ignores_claude_settings_statusline_command ... ok [INFO] [stdout] test tests::claude_settings::ignores_github_workflow_read_only_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_github_workflow_pull_request_target_default_checkout ... ok [INFO] [stdout] test tests::claude_settings::ignores_github_workflow_third_party_action_with_read_only_permissions ... ok [INFO] [stdout] test tests::claude_settings::ignores_placeholder_env_file_in_expanded_mcp_client_config ... ok [INFO] [stdout] test tests::claude_settings::ignores_github_workflow_official_actions_reference ... ok [INFO] [stdout] test tests::claude_settings::ignores_server_json_auth_header_with_secret_flag ... ok [INFO] [stdout] test tests::claude_settings::ignores_first_arg_shell_without_dash_c ... ok [INFO] [stdout] test tests::claude_settings::ignores_cursor_plugin_safe_relative_path ... ok [INFO] [stdout] test tests::claude_settings::ignores_json_public_endpoint_host_literal ... ok [INFO] [stdout] test tests::claude_settings::ignores_non_suspicious_remote_endpoint ... ok [INFO] [stdout] test tests::claude_settings::ignores_non_sensitive_env_reference_passthrough ... ok [INFO] [stdout] test tests::claude_settings::ignores_github_workflow_env_indirected_interpolation ... ok [INFO] [stdout] test tests::claude_settings::ignores_json_literal_secret_placeholder ... ok [INFO] [stdout] test tests::claude_settings::ignores_server_json_defined_header_variable ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_api_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_safe_plugin_hook_command ... ok [INFO] [stdout] test tests::claude_settings::ignores_server_json_defined_remote_variable ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_api_patch_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_release_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_api_put_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_issue_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_server_json_placeholder_auth_header ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_release_upload_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_secret_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_api_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_safe_claude_settings_network_command ... ok [INFO] [stdout] test tests::claude_settings::provider_rules_are_derived_from_rule_specs ... ok [INFO] [stdout] test tests::claude_settings::provider_source_has_no_rule_code_remediation_switch ... ok [INFO] [stdout] test tests::claude_settings::rule_spec_groups_cover_every_rule_once ... ok [INFO] [stdout] test tests::claude_settings::rule_specs_keep_catalog_identity_fields_unique ... ok [INFO] [stdout] test tests::claude_settings::rule_specs_keep_tier_detection_and_lifecycle_contracts_in_sync ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_release_create_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_repo_edit_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_repo_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_repo_transfer_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_workflow_disable_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_secret_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_server_json_loopback_package_transport_url ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_variable_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_repo_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_variable_delete_permission ... ok [INFO] [stdout] test tests::claude_settings::ignores_specific_claude_settings_gh_workflow_permission ... ok [INFO] [stdout] test tests::finds_chgrp_allowed_tools ... ok [INFO] [stdout] test tests::claude_settings::ignores_verified_tls_config ... ok [INFO] [stdout] test tests::finds_chown_allowed_tools ... ok [INFO] [stdout] test tests::finds_chmod_allowed_tools ... ok [INFO] [stdout] test tests::claude_settings::ignores_tool_collection_wrapper_object_for_sec314 ... ok [INFO] [stdout] test tests::finds_approval_bypass_instruction_on_explicit_permission_bypass ... ok [INFO] [stdout] test tests::finds_approval_bypass_instruction_on_env_change_suffix ... ok [INFO] [stdout] test tests::finds_approval_bypass_instruction_on_human_approval_bypass ... ok [INFO] [stdout] test tests::finds_approval_bypass_instruction_on_sensitive_action_suffix ... ok [INFO] [stdout] test tests::finds_devcontainer_initialize_command ... ok [INFO] [stdout] test tests::finds_devcontainer_initialize_command_in_jsonc_file ... ok [INFO] [stdout] test tests::finds_dockerfile_final_stage_root_user ... ok [INFO] [stdout] test tests::finds_devcontainer_sensitive_bind_mount ... ok [INFO] [stdout] test tests::finds_docker_compose_mutable_image ... ok [INFO] [stdout] test tests::finds_docker_compose_latest_image ... ok [INFO] [stdout] test tests::finds_docker_compose_privileged_runtime ... ok [INFO] [stdout] test tests::finds_dockerfile_latest_image ... ok [INFO] [stdout] test tests::finds_markdown_bun_http_registry ... ok [INFO] [stdout] test tests::finds_markdown_branch_pinned_pip_git_install_as_mutable ... ok [INFO] [stdout] test tests::finds_dockerfile_mutable_image ... ok [INFO] [stdout] test tests::finds_markdown_bun_http_source ... ok [INFO] [stdout] test tests::finds_markdown_cargo_http_index ... ok [INFO] [stdout] test tests::finds_dockerfile_run_download_exec ... ok [INFO] [stdout] test tests::finds_markdown_cargo_http_git_install ... ok [INFO] [stdout] test tests::finds_markdown_cargo_http_git_install_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_claude_quoted_bare_pip_install_with_uv_preference ... ok [INFO] [stdout] test tests::finds_markdown_claude_bare_pip_install_with_uv_preference ... ok [INFO] [stdout] test tests::finds_markdown_cargo_http_index_equals_form ... ok [INFO] [stdout] test tests::finds_hook_secret_exfil ... ok [INFO] [stdout] test tests::finds_hook_download_exec ... ok [INFO] [stdout] test tests::finds_hidden_html_comment_instruction ... ok [INFO] [stdout] test tests::finds_markdown_git_http_remote_with_fetch_flag ... ok [INFO] [stdout] test tests::finds_markdown_git_http_clone ... ok [INFO] [stdout] test tests::finds_hidden_html_comment_download_exec ... ok [INFO] [stdout] test tests::finds_markdown_git_http_clone_with_depth_flag ... ok [INFO] [stdout] test tests::finds_markdown_git_inline_sslverify_false_fetch ... ok [INFO] [stdout] test tests::finds_markdown_base64_exec ... ok [INFO] [stdout] test tests::finds_markdown_git_http_remote ... ok [INFO] [stdout] test tests::finds_markdown_git_inline_sslverify_false ... ok [INFO] [stdout] test tests::finds_markdown_git_ssl_no_verify ... ok [INFO] [stdout] test tests::finds_markdown_git_ssl_no_verify_true ... ok [INFO] [stdout] test tests::finds_markdown_git_sslverify_false_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_docker_network_host_example ... ok [INFO] [stdout] test tests::finds_markdown_git_sslverify_false ... ok [INFO] [stdout] test tests::finds_markdown_mutable_docker_image_with_supply_chain_preset ... ok [INFO] [stdout] test tests::finds_markdown_docker_socket_mount_example ... ok [INFO] [stdout] test tests::finds_markdown_fenced_pipe_shell ... ok [INFO] [stdout] test tests::finds_markdown_mutable_mcp_launcher_with_supply_chain_preset ... ok [INFO] [stdout] test tests::finds_markdown_network_tls_bypass_with_powershell_skip_certificate_check ... ok [INFO] [stdout] test tests::finds_markdown_mutable_mcp_launcher_pnpm_dlx_config_example ... ok [INFO] [stdout] test tests::finds_markdown_metadata_service_access_example ... ok [INFO] [stdout] test tests::finds_markdown_network_tls_bypass_with_curl_insecure ... ok [INFO] [stdout] test tests::finds_markdown_npm_http_source ... ok [INFO] [stdout] test tests::finds_markdown_multiline_docker_host_escape_example ... ok [INFO] [stdout] test tests::finds_markdown_google_metadata_service_access_example ... ok [INFO] [stdout] test tests::finds_markdown_network_tls_bypass_with_wget_no_check_certificate ... ok [INFO] [stdout] test tests::finds_markdown_mutable_docker_registry_image_example ... ok [INFO] [stdout] test tests::finds_markdown_npm_http_registry ... ok [INFO] [stdout] test tests::finds_markdown_mutable_multiline_docker_registry_image_example ... ok [INFO] [stdout] test tests::finds_markdown_mutable_mcp_launcher_pipx_run_config_example ... ok [INFO] [stdout] test tests::finds_markdown_npm_config_http_registry ... ok [INFO] [stdout] test tests::finds_markdown_mutable_mcp_launcher_config_example ... ok [INFO] [stdout] test tests::finds_markdown_npm_strict_ssl_false ... ok [INFO] [stdout] test tests::finds_markdown_pip_config_http_find_links ... ok [INFO] [stdout] test tests::finds_markdown_npm_http_registry_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_pip_config_http_index ... ok [INFO] [stdout] test tests::finds_markdown_path_traversal_instruction ... ok [INFO] [stdout] test tests::finds_markdown_pip3_config_http_find_links_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_pip_config_trusted_host ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_find_links_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_find_links ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_index ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_extra_index ... ok [INFO] [stdout] test tests::finds_markdown_mutable_mcp_launcher_cli_example ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_git_install ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_find_links_short_flag ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_source ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_index_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_pip_trusted_host ... ok [INFO] [stdout] test tests::finds_markdown_pnpm_http_registry ... ok [INFO] [stdout] test tests::finds_markdown_pip_http_short_index ... ok [INFO] [stdout] test tests::finds_markdown_python_dash_m_pip_config_trusted_host_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_pnpm_strict_ssl_false_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_pnpm_http_source ... ok [INFO] [stdout] test tests::finds_markdown_yarn_http_source ... ok [INFO] [stdout] test tests::finds_markdown_python_dash_m_pip_http_source ... ok [INFO] [stdout] test tests::finds_markdown_python_dash_m_pip_config_http_extra_index_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_python_dash_m_pip_http_git_install ... ok [INFO] [stdout] test tests::finds_markdown_python_dash_m_pip_trusted_host ... ok [INFO] [stdout] test tests::finds_mcp_sandbox_disabled_with_governance_preset ... ok [INFO] [stdout] test tests::finds_mcp_unpinned_docker_image_with_supply_chain_preset ... ok [INFO] [stdout] test tests::finds_mcp_autoapprove_wildcard_with_governance_preset ... ok [INFO] [stdout] test tests::finds_mcp_plain_http_endpoint_with_supply_chain_preset ... ok [INFO] [stdout] test tests::finds_markdown_yarn_http_registry ... ok [INFO] [stdout] test tests::finds_markdown_yarn_config_http_registry_equals_form ... ok [INFO] [stdout] test tests::finds_markdown_unpinned_pip_git_install ... ok [INFO] [stdout] test tests::finds_markdown_yarn_strict_ssl_false ... ok [INFO] [stdout] test tests::finds_multiline_hidden_html_comment_instruction ... ok [INFO] [stdout] test tests::finds_markdown_private_key_pem ... ok [INFO] [stdout] test tests::frontmatter::finds_copilot_instruction_file_above_4000_chars ... ok [INFO] [stdout] test tests::finds_markdown_privileged_docker_example ... ok [INFO] [stdout] test tests::finds_rm_allowed_tools ... ok [INFO] [stdout] test tests::finds_plugin_hook_mutable_launcher_with_supply_chain_preset ... ok [INFO] [stdout] test tests::finds_su_allowed_tools ... ok [INFO] [stdout] test tests::frontmatter::finds_curl_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_cursor_rule_malformed_inline_globs_scalar ... ok [INFO] [stdout] test tests::frontmatter::finds_cursor_rule_non_boolean_always_apply ... ok [INFO] [stdout] test tests::frontmatter::finds_cursor_rule_scalar_globs ... ok [INFO] [stdout] test tests::frontmatter::finds_bunx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_cursor_rule_missing_description ... ok [INFO] [stdout] test tests::frontmatter::finds_cursor_rule_redundant_globs_with_always_apply ... ok [INFO] [stdout] test tests::finds_package_manifest_dangerous_lifecycle_script ... ok [INFO] [stdout] test tests::finds_package_manifest_unbounded_dependency ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_api_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_cursor_rule_unknown_frontmatter_key ... ok [INFO] [stdout] test tests::finds_package_manifest_git_dependency ... ok [INFO] [stdout] test tests::frontmatter::finds_edit_unsafe_path_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::finds_untrusted_instruction_promotion_on_web_page ... ok [INFO] [stdout] test tests::finds_package_manifest_direct_url_dependency ... ok [INFO] [stdout] test tests::finds_untrusted_instruction_promotion_on_pull_request_override ... ok [INFO] [stdout] test tests::finds_untrusted_instruction_promotion_on_tool_output ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_api_patch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_api_post_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_issue_create_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_secret_set_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_pr_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_release_create_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_release_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_workflow_run_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_repo_create_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_add_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_api_put_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_secret_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_release_upload_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_repo_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_repo_transfer_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_repo_edit_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_clean_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_workflow_disable_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_variable_set_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_push_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_gh_variable_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_rebase_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_branch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_am_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_apply_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_commit_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_checkout_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_stash_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_ls_remote_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_cherry_pick_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_config_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_clone_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_restore_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_path_specific_copilot_instruction_with_empty_apply_to_string ... ok [INFO] [stdout] test tests::frontmatter::finds_path_specific_copilot_instruction_frontmatter_without_apply_to ... ok [INFO] [stdout] test tests::frontmatter::finds_git_fetch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_reset_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_git_merge_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_package_install_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_glob_unsafe_path_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_path_specific_copilot_instruction_with_invalid_apply_to_array ... ok [INFO] [stdout] test tests::frontmatter::finds_git_tag_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_npm_exec_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_plugin_agent_permission_mode_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_path_specific_copilot_instruction_with_invalid_apply_to_glob ... ok [INFO] [stdout] test tests::frontmatter::finds_path_specific_copilot_instruction_file_above_4000_chars ... ok [INFO] [stdout] test tests::frontmatter::finds_path_specific_copilot_instruction_without_apply_to_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_path_specific_copilot_instruction_with_wrong_suffix ... ok [INFO] [stdout] test tests::frontmatter::finds_npx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_path_specific_copilot_instruction_with_invalid_apply_to_glob_in_array ... ok [INFO] [stdout] test tests::frontmatter::finds_plugin_agent_mcp_servers_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_pipx_run_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_plugin_agent_hooks_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_bash_allowed_tools_in_yaml_list_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_glob_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_pnpm_dlx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_read_unsafe_path_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_grep_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_edit_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_bash_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_sudo_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_python_dash_m_pip_install_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_read_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_webfetch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_websearch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_webfetch_raw_github_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wget_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_uvx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_tools_array_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_write_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_unscoped_write_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_curl_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_grep_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_bash_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_globs_when_always_apply_is_false ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_webfetch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_edit_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_websearch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_write_unsafe_path_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_read_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_wildcard_glob_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::finds_yarn_dlx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_copilot_instruction_file_above_limit_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_copilot_instruction_file_within_limit ... ok [INFO] [stdout] test tests::frontmatter::ignores_curl_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_non_boolean_always_apply_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_redundant_globs_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_missing_description_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_scalar_globs_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_sequence_globs ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_branch_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_unknown_frontmatter_key_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_boolean_always_apply ... ok [INFO] [stdout] test tests::frontmatter::ignores_explicit_tool_allowlist_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_fixture_like_gh_pr_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_add_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_with_description_for_sec380 ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_am_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_config_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_apply_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_cursor_rule_supported_frontmatter_keys_for_sec379 ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_clean_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_reset_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_clone_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_cherry_pick_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_clone_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_merge_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_invalid_apply_to_glob_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_path_specific_copilot_instruction_with_valid_apply_to_array ... ok [INFO] [stdout] test tests::frontmatter::ignores_invalid_apply_to_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_tag_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_path_specific_copilot_instruction_with_apply_to_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_fetch_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_restore_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_git_rebase_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_missing_apply_to_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_path_specific_copilot_instruction_with_invalid_frontmatter_for_sec354 ... ok [INFO] [stdout] test tests::frontmatter::ignores_repo_level_copilot_instruction_without_apply_to ... ok [INFO] [stdout] test tests::frontmatter::ignores_package_install_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_repo_local_edit_scope_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_path_specific_copilot_instruction_with_valid_apply_to_glob_for_sec377 ... ok [INFO] [stdout] test tests::frontmatter::ignores_repo_local_glob_scope_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_path_specific_copilot_instruction_with_correct_suffix_for_sec370 ... ok [INFO] [stdout] test tests::frontmatter::ignores_package_install_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_plugin_agent_hooks_and_mcp_servers_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_permission_mode_outside_plugin_agent_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_plugin_agent_permission_mode_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_glob_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_websearch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_edit_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_bash_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_repo_local_write_scope_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_repo_local_read_scope_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_edit_allowed_tools_wildcard_rule_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_glob_allowed_tools_wildcard_rule_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_grep_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_bash_allowed_tools_wildcard_rule_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_read_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_grep_allowed_tools_wildcard_rule_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_read_allowed_tools_wildcard_rule_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_websearch_allowed_tools_wildcard_rule_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_write_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_api_put_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_webfetch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_release_upload_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_release_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_webfetch_allowed_tools_wildcard_rule_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_api_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_bunx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_api_post_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_scoped_write_allowed_tools_wildcard_rule_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_repo_create_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_api_patch_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_pr_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_release_create_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_repo_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_issue_create_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_variable_set_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_npm_exec_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_secret_set_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_workflow_disable_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_repo_edit_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_secret_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_repo_transfer_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_workflow_run_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_git_ls_remote_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_gh_variable_delete_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_pnpm_dlx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_pipx_run_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_sudo_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_sudo_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_uvx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_unscoped_bash_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_npx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_wildcard_bash_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_unscoped_read_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_wildcard_tool_access_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_unscoped_glob_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_unscoped_edit_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::ignores_specific_yarn_dlx_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_unscoped_grep_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::unscoped_glob_allowed_tools_requires_governance_preset ... ok [INFO] [stdout] test tests::frontmatter::ignores_wget_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::unscoped_grep_allowed_tools_requires_governance_preset ... ok [INFO] [stdout] test tests::frontmatter::ignores_unscoped_write_allowed_tools_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::manifest_backed_plugin_command_markdown_uses_existing_markdown_rules ... ok [INFO] [stdout] test tests::frontmatter::ignores_webfetch_non_raw_github_allowed_tools_in_frontmatter ... ok [INFO] [stdout] test tests::frontmatter::ignores_wget_allowed_tools_when_command_is_more_specific ... ok [INFO] [stdout] test tests::frontmatter::unscoped_edit_allowed_tools_requires_governance_preset ... ok [INFO] [stdout] test tests::ignores_approval_bypass_under_must_not_header ... ok [INFO] [stdout] test tests::frontmatter::ignores_wrong_suffix_copilot_instruction_on_fixture_like_path ... ok [INFO] [stdout] test tests::frontmatter::unscoped_write_allowed_tools_requires_governance_preset ... ok [INFO] [stdout] test tests::frontmatter::unscoped_read_allowed_tools_requires_governance_preset ... ok [INFO] [stdout] test tests::ignores_approval_bypass_in_code_blocks ... ok [INFO] [stdout] test tests::ignores_generic_repo_local_parent_reference ... ok [INFO] [stdout] test tests::ignores_chgrp_specific_allowed_tools ... ok [INFO] [stdout] test tests::ignores_chown_specific_allowed_tools ... ok [INFO] [stdout] test tests::ignores_markdown_cargo_https_index ... ok [INFO] [stdout] test tests::ignores_chmod_specific_allowed_tools ... ok [INFO] [stdout] test tests::ignores_markdown_bare_pip_install_without_uv_preference_context ... ok [INFO] [stdout] test tests::ignores_base64_exec_inside_fenced_code_block ... ok [INFO] [stdout] test tests::ignores_markdown_docker_prose_without_run_example ... ok [INFO] [stdout] test tests::ignores_markdown_claude_uv_pip_install_with_uv_preference ... ok [INFO] [stdout] test tests::ignores_markdown_cargo_https_git_install ... ok [INFO] [stdout] test tests::ignores_do_not_sensitive_action_without_asking ... ok [INFO] [stdout] test tests::ignores_approval_bypass_in_frontmatter ... ok [INFO] [stdout] test tests::ignores_markdown_git_https_clone ... ok [INFO] [stdout] test tests::ignores_approval_bypass_under_never_header ... ok [INFO] [stdout] test tests::ignores_intermediate_dockerfile_root_user_when_final_stage_is_nonroot ... ok [INFO] [stdout] test tests::ignores_markdown_commit_pinned_pip_git_install ... ok [INFO] [stdout] test tests::ignores_generic_ssrf_prose_without_literal_metadata_endpoint ... ok [INFO] [stdout] test tests::ignores_markdown_digest_pinned_docker_image_example ... ok [INFO] [stdout] test tests::ignores_markdown_bare_npx_command_without_args ... ok [INFO] [stdout] test tests::ignores_markdown_network_tls_bypass_powershell_safety_guidance ... ok [INFO] [stdout] test tests::ignores_markdown_network_tls_bypass_safety_guidance ... ok [INFO] [stdout] test tests::ignores_markdown_git_https_remote ... ok [INFO] [stdout] test tests::ignores_markdown_git_ssl_no_verify_disabled ... ok [INFO] [stdout] test tests::ignores_markdown_git_inline_sslverify_true ... ok [INFO] [stdout] test tests::ignores_markdown_npm_http_registry_for_direct_source_rule ... ok [INFO] [stdout] test tests::ignores_markdown_git_sslverify_true ... ok [INFO] [stdout] test tests::ignores_markdown_generic_npx_without_mcp_context ... ok [INFO] [stdout] test tests::ignores_markdown_npm_https_registry ... ok [INFO] [stdout] test tests::ignores_markdown_pip_https_find_links ... ok [INFO] [stdout] test tests::ignores_markdown_pip_config_https_index ... ok [INFO] [stdout] test tests::ignores_markdown_npm_https_source ... ok [INFO] [stdout] test tests::ignores_markdown_command_snippet_without_mcp_context ... ok [INFO] [stdout] test tests::ignores_markdown_mutable_mcp_launcher_when_safety_guidance_is_present ... ok [INFO] [stdout] test tests::ignores_markdown_local_docker_image_example ... ok [INFO] [stdout] test tests::ignores_markdown_npm_strict_ssl_true ... ok [INFO] [stdout] test tests::ignores_markdown_pip_config_unrelated_key ... ok [INFO] [stdout] test tests::ignores_markdown_pip_config_https_find_links ... ok [INFO] [stdout] test tests::ignores_markdown_pip_https_git_install_for_http_git_rule ... ok [INFO] [stdout] test tests::ignores_markdown_metadata_service_deny_list_prose_without_command_marker ... ok [INFO] [stdout] test tests::ignores_markdown_pip_https_index ... ok [INFO] [stdout] test tests::ignores_markdown_pip_http_index_for_direct_source_rule ... ok [INFO] [stdout] test tests::ignores_markdown_pip_without_trusted_host ... ok [INFO] [stdout] test tests::ignores_markdown_pip_https_source ... ok [INFO] [stdout] test tests::ignores_markdown_pnpm_config_https_registry ... ok [INFO] [stdout] test tests::ignores_project_scoped_markdown_file_reference ... ok [INFO] [stdout] test tests::ignores_markdown_private_key_search_string_literal ... ok [INFO] [stdout] test tests::ignores_repo_local_reference_markdown_in_sibling_skill ... ok [INFO] [stdout] test tests::ignores_negated_untrusted_instruction_promotion ... ok [INFO] [stdout] test tests::ignores_repo_local_markdown_link_reference ... ok [INFO] [stdout] test tests::ignores_repo_local_assets_directory_reference_in_sibling_skill ... ok [INFO] [stdout] test tests::ignores_markdown_pipe_shell_outside_fenced_block ... ok [INFO] [stdout] test tests::ignores_markdown_safe_docker_example_without_host_escape ... ok [INFO] [stdout] test tests::ignores_markdown_public_key_pem ... ok [INFO] [stdout] test tests::ignores_markdown_pipx_command_without_run ... ok [INFO] [stdout] test tests::ignores_rm_specific_allowed_tools ... ok [INFO] [stdout] test tests::ignores_markdown_yarn_command_without_dlx ... ok [INFO] [stdout] test tests::ignores_safe_approval_guidance ... ok [INFO] [stdout] test tests::ignores_negated_sensitive_action_with_confirmation_requirement ... ok [INFO] [stdout] test tests::ignores_markdown_remote_bridge_uvx_cli_example ... ok [INFO] [stdout] test tests::ignores_su_specific_allowed_tools ... ok [INFO] [stdout] test tests::ignores_untrusted_instruction_promotion_in_code_blocks ... ok [INFO] [stdout] test tests::ignores_safe_html_comments ... ok [INFO] [stdout] test tests::ignores_safe_docker_compose_runtime ... ok [INFO] [stdout] test tests::json_mcp::finds_hook_plain_http_secret_exfil ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_bash_unscoped ... ok [INFO] [stdout] test tests::json_mcp::finds_json_literal_secret_in_env_value ... ok [INFO] [stdout] test tests::ignores_untrusted_context_without_instruction_promotion ... ok [INFO] [stdout] test tests::json_mcp::does_not_flag_mcp_autoapprove_unscoped_tool_family_when_entries_are_scoped ... ok [INFO] [stdout] test tests::json_mcp::finds_hook_base64_exec ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_bunx ... ok [INFO] [stdout] test tests::ignores_untrusted_instruction_promotion_in_frontmatter ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_bash_wildcard ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_chmod ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_api_post ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_chgrp ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_edit_unsafe_path ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_chown ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_curl ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_edit_unscoped ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_api_delete ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_crontab ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_edit_wildcard ... ok [INFO] [stdout] test tests::ignores_negative_and_illustrative_download_exec_prose ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_api_put ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_release_create ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_api_patch ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_issue_create ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_pr ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_repo_edit ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_release_delete ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_repo_delete ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_release_upload ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_repo_create ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_secret_delete ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_variable_set ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_variable_delete ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_repo_transfer ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_secret_set ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_add ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_workflow_run ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_am ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_gh_workflow_disable ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_apply ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_cherry_pick ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_clean ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_branch ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_config ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_fetch ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_checkout ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_clone ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_push ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_ls_remote ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_commit ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_rebase ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_merge ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_restore ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_glob_unscoped ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_stash ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_grep_unsafe_path ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_grep_wildcard ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_reset ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_npm_exec ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_git_tag ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_glob_unsafe_path ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_glob_wildcard ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_grep_unscoped ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_read_unsafe_path ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_launchctl_bootstrap ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_rm ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_pipx_run ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_tools_true ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_package_install ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_read_unscoped ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_su ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_launchctl_load ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_systemctl_enable ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_webfetch_unscoped ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_read_wildcard ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_pnpm_dlx ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_npx ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_sudo ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_write_unscoped ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_websearch_unscoped ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_uvx ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_webfetch_raw_githubusercontent ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_webfetch_wildcard ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_websearch_wildcard ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_wildcard ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_write_unsafe_path ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_write_wildcard ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_wget ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_capabilities_wildcard_scalar ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_autoapprove_yarn_dlx ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_dangerous_docker_flag ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_capabilities_wildcard_array ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_disable_sandbox_true ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_inline_download_exec_in_args ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_mutable_docker_pull_separate_always ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_network_tls_bypass_flag ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_sandbox_false ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_sudo_command ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_mutable_docker_pull_equals_always ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_sensitive_docker_mount ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_sudo_args0 ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_unpinned_docker_image ... ok [INFO] [stdout] test tests::json_mcp::finds_mcp_trust_tools_true ... ok [INFO] [stdout] test tests::json_mcp::ignores_digest_pinned_mcp_docker_image ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_autoapprove_nonmatching_tools ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_autoapprove_tools_false ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_disable_sandbox_false ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_non_mutable_docker_pull_policy ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_capabilities_scoped_values ... ok [INFO] [stdout] test tests::json_mcp::ignores_repo_local_parent_relative_mcp_reference_in_nested_skill ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_non_sudo_command ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_non_sudo_args0 ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_network_download_without_pipe_exec ... ok [INFO] [stdout] test tests::json_mcp::invalid_yaml_frontmatter_still_allows_markdown_security_findings ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_sandbox_true ... ok [INFO] [stdout] test tests::mcp_autoapprove_wildcard_requires_mcp_or_governance_preset ... ok [INFO] [stdout] test tests::markdown_mutable_docker_image_requires_supply_chain_preset ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_short_flag_without_network_context ... ok [INFO] [stdout] test tests::markdown_mutable_mcp_launcher_requires_supply_chain_preset ... ok [INFO] [stdout] test tests::mcp_sandbox_disabled_requires_mcp_or_governance_preset ... ok [INFO] [stdout] test tests::mcp_plain_http_endpoint_requires_supply_chain_preset ... ok [INFO] [stdout] test tests::json_mcp::hook_auth_exposure_cases ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_specific_autoapprove_list ... ok [INFO] [stdout] test tests::json_mcp::ignores_named_volume_mcp_docker_mount ... ok [INFO] [stdout] test tests::json_mcp::ignores_mcp_trust_tools_false ... ok [INFO] [stdout] test tests::mcp_unpinned_docker_image_requires_supply_chain_preset ... ok [INFO] [stdout] test tests::plugin_hook_mutable_launcher_requires_supply_chain_preset ... ok [INFO] [stdout] test tests::leaves_non_fixable_markdown_download_exec_without_fix ... ok [INFO] [stdout] test tests::json_mcp::ignores_safe_mcp_docker_run ... ok [INFO] [stdout] test tests::json_mcp::hook_tls_bypass_cases ... ok [INFO] [stdout] test tests::json_mcp::mcp_mutable_launcher_cases ... ok [INFO] [stdout] test corpus_tests::benign::benign_corpus_cases_scan_cleanly ... ok [INFO] [stdout] test corpus_tests::malicious::malicious_corpus_cases_trigger_expected_findings has been running for over 60 seconds [INFO] [stdout] test corpus_tests::malicious::malicious_corpus_cases_trigger_expected_findings ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 920 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 60.26s [INFO] [stdout] [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_api-e85a700d5de6d394) [INFO] [stdout] [INFO] [stdout] running 28 tests [INFO] [stdout] test catalog::tests::catalog_taxonomy_slugs_are_stable ... ok [INFO] [stdout] test catalog_validation::tests::validation_helpers_accept_valid_catalog_shapes ... ok [INFO] [stdout] test context::tests::workspace_artifact_ignores_non_markdown_capabilities ... ok [INFO] [stdout] test context::tests::scan_context_can_attach_active_rule_codes ... ok [INFO] [stdout] test context::tests::workspace_scan_context_can_attach_active_rule_codes ... ok [INFO] [stdout] test finding::tests::related_and_stable_key_constructors_match_inputs ... ok [INFO] [stdout] test context::tests::workspace_scan_context_constructor_keeps_values ... ok [INFO] [stdout] test finding::tests::constructors_create_expected_values ... ok [INFO] [stdout] test context::tests::scan_context_keeps_original_artifact_and_payload ... ok [INFO] [stdout] test context::tests::workspace_artifact_mutators_set_expected_fields ... ok [INFO] [stdout] test context::tests::workspace_artifact_extracts_capabilities_from_markdown_frontmatter ... ok [INFO] [stdout] test rule::tests::rule_provider_default_workspace_result_is_empty ... ok [INFO] [stdout] test rule::tests::scan_scope_helpers_are_stable ... ok [INFO] [stdout] test preset::tests::builtin_presets_have_unique_ids_and_known_overlay_shape ... ok [INFO] [stdout] test preset::tests::membership_preset_ids_exclude_overlay_presets ... ok [INFO] [stdout] test rule::tests::provider_error_and_scan_result_cover_defaults ... ok [INFO] [stdout] test parsed::tests::document_semantics_as_conversions ... ok [INFO] [stdout] test parsed::tests::constructors_roundtrip_common_types ... ok [INFO] [stdout] test preset::tests::builtin_public_lane_inference_prefers_explicit_sidecar_lanes ... ok [INFO] [stdout] test tests::confidence_labels_and_slugs_are_stable ... ok [INFO] [stdout] test tests::declare_rule_exposes_static_metadata ... ok [INFO] [stdout] test rule::tests::rule_metadata_helpers_match_contract ... ok [INFO] [stdout] test finding::tests::evidence_and_suggestion_helpers_chain ... ok [INFO] [stdout] test parsed::tests::syntax_and_frontmatter_constructors_set_expected_values ... ok [INFO] [stdout] test catalog_validation::tests::validation_helpers_reject_public_lane_preset_drift - should panic ... ok [INFO] [stdout] test catalog_validation::tests::validation_helpers_reject_stable_rules_without_structured_evidence - should panic ... ok [INFO] [stdout] test catalog_validation::tests::validation_helpers_reject_sidecar_lane_preset_drift - should panic ... ok [INFO] [stdout] test catalog_validation::tests::validation_helpers_reject_overlapping_corpus_ids - should panic ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 28 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s [INFO] [stdout] [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_builtins-6d1d2f7ecbd6da24) [INFO] [stdout] [INFO] [stdout] running 2 tests [INFO] [stdout] test tests::builtin_rule_catalog_entries_pass_validation_contracts ... ok [INFO] [stdout] test tests::stable_rule_corpus_links_resolve_to_checked_in_cases ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.27s [INFO] [stdout] [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_cli-9564252d0e657741) [INFO] [stdout] [INFO] [stdout] running 211 tests [INFO] [stdout] test args::tests::scan_defaults_to_current_directory ... ok [INFO] [stdout] test args::tests::inventory_os_defaults_to_both_scope_without_path_root ... ok [INFO] [stdout] test args::tests::explain_config_requires_single_target ... ok [INFO] [stdout] test args::tests::fix_rejects_extra_positional_argument ... ok [INFO] [stdout] test args::tests::policy_os_requires_policy_path ... ok [INFO] [stdout] test args::tests::scan_known_parses_color_mode ... ok [INFO] [stdout] test args::tests::fix_defaults_to_preview_in_current_directory ... ok [INFO] [stdout] test args::tests::fix_parses_apply_and_repeated_rules ... ok [INFO] [stdout] test args::tests::inventory_os_parses_color_mode ... ok [INFO] [stdout] test args::tests::inventory_os_parses_repeated_presets ... ok [INFO] [stdout] test args::tests::inventory_os_parses_scope_client_and_path_root ... ok [INFO] [stdout] test args::tests::inventory_os_rejects_extra_positional_argument ... ok [INFO] [stdout] test args::tests::policy_os_parses_color_mode ... ok [INFO] [stdout] test args::tests::scan_known_rejects_extra_positional_argument ... ok [INFO] [stdout] test args::tests::policy_os_parses_repeated_presets ... ok [INFO] [stdout] test args::tests::scan_rejects_invalid_color_mode ... ok [INFO] [stdout] test args::tests::policy_os_parses_scope_client_path_root_and_policy ... ok [INFO] [stdout] test args::tests::scan_known_defaults_to_both_scope ... ok [INFO] [stdout] test builtin_providers::tests::resolves_real_lintai_driver_near_test_binary ... ok [INFO] [stdout] test commands::advisory_db::tests::run_export_bundled_is_success ... ok [INFO] [stdout] test commands::advisory_db::tests::run_help_command_is_success ... ok [INFO] [stdout] test args::tests::scan_parses_color_mode ... ok [INFO] [stdout] test args::tests::scan_known_trims_preset_values ... ok [INFO] [stdout] test args::tests::scan_trims_preset_values ... ok [INFO] [stdout] test commands::advisory_db::tests::run_update_round_trips_normalized_snapshot ... ok [INFO] [stdout] test args::tests::scan_parses_inline_format_flag ... ok [INFO] [stdout] test args::tests::scan_known_parses_repeated_presets ... ok [INFO] [stdout] test args::tests::scan_parses_repeated_presets ... ok [INFO] [stdout] test args::tests::scan_parses_sarif_format_flag ... ok [INFO] [stdout] test builtin_providers::tests::runner_request_serializes_schema_and_phase ... ok [INFO] [stdout] test args::tests::scan_rejects_extra_positional_argument ... ok [INFO] [stdout] test commands::scan_agent_plugin::tests::rejects_unrelated_plugin_manifest ... ok [INFO] [stdout] test builtin_providers::tests::isolated_partial_error_provider_preserves_findings_and_errors ... ok [INFO] [stdout] test args::tests::scan_known_parses_scope_and_repeated_client_filters ... ok [INFO] [stdout] test compat_tests::compat_case_dirs_are_discoverable ... ok [INFO] [stdout] test commands::scan_agent_plugin::tests::accepts_published_agent_plugins_manifest ... ok [INFO] [stdout] test commands::advisory_db::tests::run_without_arguments_reports_usage ... ok [INFO] [stdout] test commands::scan_agent_plugin::tests::installation_policy_is_fixed_and_unambiguous ... ok [INFO] [stdout] test external_validation::inventory::common::package::tests::package_label_github_actions_extension_maps_expected_text ... ok [INFO] [stdout] test external_validation::inventory::common::package::tests::package_label_server_json_extension_maps_expected_text ... ok [INFO] [stdout] test external_validation::inventory::common::package::tests::package_label_tool_json_extension_maps_expected_text ... ok [INFO] [stdout] test execution::tests::scan_summary_runtime_errors_override_blocking_finding_exit_code ... ok [INFO] [stdout] test external_validation::inventory::common::paths::tests::detects_generic_validation_excluded_paths ... ok [INFO] [stdout] test external_validation::inventory::common::paths::tests::fixture_like_paths_detect_nested_path_tokens ... ok [INFO] [stdout] test external_validation::inventory::ai_native::admission::tests::admits_local_claude_settings_with_command_hooks ... ok [INFO] [stdout] test external_validation::inventory::common::surfaces::tests::expands_mcp_variant_surface_for_fixture_like_paths ... ok [INFO] [stdout] test external_validation::inventory::common::surfaces::tests::inserts_docker_mcp_launch_fixture_surface_when_expanded_variant_is_fixture_like ... ok [INFO] [stdout] test external_validation::inventory::common::paths::tests::segment_tokens_splits_by_delimiters_and_camel_case ... ok [INFO] [stdout] test external_validation::inventory::common::paths::tests::tool_json_excluded_matches_generic_filter ... ok [INFO] [stdout] test external_validation::inventory::common::package::tests::package_label_ai_native_discovery_maps_expected_text ... ok [INFO] [stdout] test external_validation::inventory::common::package::tests::package_label_canonical_maps_expected_text ... ok [INFO] [stdout] test execution::tests::inventory_summary_runtime_errors_override_blocking_flag ... ok [INFO] [stdout] test external_validation::inventory::common::surfaces::tests::inserts_explicit_mcp_variant_surface_for_non_fixture_path ... ok [INFO] [stdout] test external_validation::inventory::common::surfaces::tests::inventories_local_claude_settings_surface ... ok [INFO] [stdout] test external_validation::inventory::common::surfaces::tests::inserts_docker_mcp_launch_surface_for_fixture_like_expanded_client ... ok [INFO] [stdout] test external_validation::inventory::github_actions::tests::workflow_steps_recognizes_array_containing_runs_step ... ok [INFO] [stdout] test external_validation::inventory::github_actions::tests::workflow_steps_recognizes_steps_in_nested_objects ... ok [INFO] [stdout] test external_validation::application::tests::rerun_application_coordinates_ports_and_writes_candidate_ledger ... ok [INFO] [stdout] test external_validation::inventory::server_json::tests::contains_semantic_server_json_requires_name_version_and_manifest ... ok [INFO] [stdout] test external_validation::inventory::tool_json::tests::contains_semantic_tool_descriptor_json_matches_object_variants ... ok [INFO] [stdout] test external_validation::inventory::tool_json::tests::is_tool_descriptor_shape_checks_nested_function_parameters ... ok [INFO] [stdout] test builtin_providers::tests::isolated_timeout_provider_returns_timeout_error ... ok [INFO] [stdout] test external_validation::package::tests::parse_known_packages ... ok [INFO] [stdout] test external_validation::package::tests::shortlist_and_ledger_paths_match_spec ... ok [INFO] [stdout] test external_validation::report::sec347::tests::primary_driver_label_reports_cli_when_cli_has_majority ... ok [INFO] [stdout] test external_validation::package::tests::parse_rejects_unknown_package ... ok [INFO] [stdout] test external_validation::report::sec347::tests::primary_driver_label_reports_config_when_config_has_majority ... ok [INFO] [stdout] test external_validation::report::sec347::tests::primary_driver_label_reports_mix_when_equal_but_nonzero ... ok [INFO] [stdout] test external_validation::report::sec347::tests::sec347_cli_form_requires_nonsafety_context_token ... ok [INFO] [stdout] test external_validation::report::sec347::tests::sec347_config_snippet_form_detects_mutable_launcher ... ok [INFO] [stdout] test external_validation::report::sec347::tests::primary_driver_label_reports_no_current_evidence_when_empty ... ok [INFO] [stdout] test external_validation::report::sec347::tests::sec347_mutable_launcher_token_matches_markers_with_word_boundary ... ok [INFO] [stdout] test external_validation::report::sec347::tests::sec347_contains_package_like_args_skips_negated_tokens ... ok [INFO] [stdout] test external_validation::runner::tests::parse_package_flag_accepts_the_last_flag ... ok [INFO] [stdout] test external_validation::runner::tests::parse_package_flag_ignores_missing_value_but_preserves_default ... ok [INFO] [stdout] test external_validation::runner::tests::parse_package_flag_rejects_invalid_flag ... ok [INFO] [stdout] test external_validation::runner::tests::parse_package_flag_rejects_rerun_only_lintai_bin_flag ... ok [INFO] [stdout] test external_validation::runner::tests::parse_package_flag_rejects_unknown_package_name ... ok [INFO] [stdout] test external_validation::runner::tests::parse_package_flag_uses_last_package_flag ... ok [INFO] [stdout] test builtin_providers::tests::isolated_panic_provider_returns_execution_error ... ok [INFO] [stdout] test external_validation::runner::tests::parse_rerun_flags_accepts_lintai_bin_and_last_package ... ok [INFO] [stdout] test external_validation::runner::tests::parse_rerun_flags_rejects_empty_lintai_bin ... ok [INFO] [stdout] test external_validation::runner::tests::parse_rerun_flags_defaults_to_canonical_without_explicit_binary ... ok [INFO] [stdout] test external_validation::runner::tests::rerun_driver_contract_requires_explicit_driver_for_workspace_target_sibling_resolution ... ok [INFO] [stdout] test commands::explain_config::tests::explain_config_mentions_quiet_recommended_default ... ok [INFO] [stdout] test external_validation::runner::tests::run_with_unknown_command_reports_unknown_command ... ok [INFO] [stdout] test external_validation::inventory::server_json::tests::admitted_server_json_paths_filters_to_semantic_documents ... ok [INFO] [stdout] test compat_tests::explain_config_snapshot_matches ... ok [INFO] [stdout] test external_validation::inventory::tool_json::tests::rejects_tool_descriptor_without_semantic_shape ... ok [INFO] [stdout] test external_validation::inventory::tool_json::tests::admits_tool_descriptor_with_semantic_shape ... ok [INFO] [stdout] test compat_tests::format_explain_config_preserves_current_line_order ... ok [INFO] [stdout] test external_validation::runner::tests::run_without_arguments_reports_usage ... ok [INFO] [stdout] test external_validation::scan::command::tests::run_scan_with_exit_two_returns_stdout_for_runtime_error_collection ... ok [INFO] [stdout] test external_validation::scan::command::tests::run_scan_with_unix_echo_returns_stdout ... ok [INFO] [stdout] test external_validation::scan::command::tests::run_scan_with_missing_binary_returns_spawn_error ... ok [INFO] [stdout] test external_validation::scan::command::tests::run_scan_includes_repeated_presets ... ok [INFO] [stdout] test external_validation::scan::repo::tests::normalize_rel_path_keeps_relative_components ... ok [INFO] [stdout] test external_validation::scan::repo::tests::repo_dir_name_normalizes_slashes ... ok [INFO] [stdout] test external_validation::inventory::server_json::tests::admitted_server_json_paths_errors_when_none_semantic ... ok [INFO] [stdout] test external_validation::inventory::github_actions::tests::admitted_github_workflow_paths_collects_only_semantic_workflows ... ok [INFO] [stdout] test external_validation::tests::canonical_precision_contract_rejects_stale_recommended_adjudications ... ok [INFO] [stdout] test external_validation::tests::docish_tool_json_paths_are_rejected ... ok [INFO] [stdout] test external_validation::tests::fixture_like_paths_are_rejected ... ok [INFO] [stdout] test external_validation::report::sec347::tests::sec347_subtype_counts_distinguish_cli_and_config_repos ... ok [INFO] [stdout] test external_validation::scan::repo::tests::workspace_root_resolves_to_repo_parent_parent_of_manifest ... ok [INFO] [stdout] test external_validation::tests::package_flag_defaults_to_canonical ... ok [INFO] [stdout] test external_validation::tests::github_actions_extension_report_has_required_sections ... ok [INFO] [stdout] test external_validation::tests::package_flag_parses_ai_native_discovery ... ok [INFO] [stdout] test external_validation::tests::package_flag_parses_server_json_extension ... ok [INFO] [stdout] test external_validation::tests::package_flag_parses_github_actions_extension ... ok [INFO] [stdout] test external_validation::tests::recommended_precision_review_tracks_reviewed_and_unadjudicated_hits ... ok [INFO] [stdout] test commands::explain_config::tests::explain_config_omits_quiet_default_note_for_explicit_non_recommended_presets ... ok [INFO] [stdout] test external_validation::tests::semantic_claude_settings_require_command_hooks ... ok [INFO] [stdout] test external_validation::inventory::github_actions::tests::admitted_github_workflow_paths_errors_when_no_admission ... ok [INFO] [stdout] test external_validation::scan::repo::tests::materialize_repo_propagates_download_error_from_curl ... ok [INFO] [stdout] test external_validation::scan::repo::tests::materialize_repo_reuses_matching_marker_without_running_commands ... ok [INFO] [stdout] test external_validation::tests::package_flag_parses_tool_json_extension ... ok [INFO] [stdout] test external_validation::tests::semantic_server_json_requires_name_version_and_remotes_or_packages ... ok [INFO] [stdout] test external_validation::tests::semantic_docker_mcp_launch_requires_docker_run_shape ... ok [INFO] [stdout] test external_validation::tests::semantic_gemini_mcp_config_requires_top_level_mcp_servers_with_command ... ok [INFO] [stdout] test external_validation::tests::semantic_plugin_hooks_require_command_entries ... ok [INFO] [stdout] test external_validation::tests::server_json_extension_report_has_required_sections ... ok [INFO] [stdout] test external_validation::tests::semantic_tool_descriptor_json_requires_name_and_schema ... ok [INFO] [stdout] test external_validation::tests::shortlist_parser_shape_is_expected ... ok [INFO] [stdout] test external_validation::tests::template_map_preserves_manual_fields ... ok [INFO] [stdout] test external_validation::tests::tool_json_extension_report_has_required_sections ... ok [INFO] [stdout] test known_scan::tests::manifest_rejects_duplicate_scope_path_pairs ... ok [INFO] [stdout] test known_scan::tests::manifest_requires_kind_hint_for_lintable_surface ... ok [INFO] [stdout] test known_scan::tests::merge_summary_rewrites_paths_to_absolute_locations ... ok [INFO] [stdout] test external_validation::tests::semantic_github_workflow_yaml_requires_jobs_and_workflow_keys ... ok [INFO] [stdout] test output::tests::json_output_omits_empty_optional_sections ... ok [INFO] [stdout] test output::tests::text_output_can_render_with_ansi_color ... ok [INFO] [stdout] test external_validation::tests::fill_auto_fields_separates_stable_preview_diagnostics_and_runtime_errors ... ok [INFO] [stdout] test output::tests::sarif_output_contains_stable_fingerprint ... ok [INFO] [stdout] test output::text::common::tests::changed_root_fragment_includes_only_changed_fields ... ok [INFO] [stdout] test output::text::common::tests::count_label_handles_singular_and_plural ... ok [INFO] [stdout] test output::text::common::tests::diagnostic_code_label_humanizes_snake_case ... ok [INFO] [stdout] test output::text::common::tests::location_detail_label_prefers_line_column_when_present ... ok [INFO] [stdout] test output::text::common::tests::location_label_falls_back_to_byte_span ... ok [INFO] [stdout] test output::text::common::tests::location_label_prefers_line_column_when_present ... ok [INFO] [stdout] test output::text::common::tests::maps_provider_execution_phase_labels ... ok [INFO] [stdout] test output::text::inventory::tests::appends_inventory_summary_when_diff_present ... ok [INFO] [stdout] test output::text::inventory::tests::appends_inventory_summary_without_diff ... ok [INFO] [stdout] test output::text::inventory::tests::changed_root_without_metadata_delta_marks_content_change ... ok [INFO] [stdout] test compat_tests::json_report_snapshot_matches ... ok [INFO] [stdout] test output::text::policy::tests::appends_policy_sections_with_stats_and_matches ... ok [INFO] [stdout] test output::text::scan::tests::diagnostics_section_humanizes_internal_codes ... ok [INFO] [stdout] test output::text::scan::tests::finding_sections_compact_large_path_groups ... ok [INFO] [stdout] test output::text::scan::tests::finding_sections_group_multiple_findings_by_path ... ok [INFO] [stdout] test output::text::scan::tests::finding_sections_render_grouped_cards ... ok [INFO] [stdout] test output::text::scan::tests::summary_renders_lane_badges ... ok [INFO] [stdout] test output::text::style::tests::always_and_never_override_auto_resolution ... ok [INFO] [stdout] test output::text::style::tests::auto_color_disables_on_non_terminal ... ok [INFO] [stdout] test output::text::style::tests::auto_color_respects_env_switches ... ok [INFO] [stdout] test output::text::style::tests::auto_color_uses_terminal_when_env_is_clean ... ok [INFO] [stdout] test output::text::style::tests::clicolor_force_overrides_other_disable_switches ... ok [INFO] [stdout] test output::text::style::tests::lane_explainer_is_plain_text_friendly ... ok [INFO] [stdout] test output::text::tests::inventory_diff_renders_explicit_new_findings_section ... ok [INFO] [stdout] test path::tests::accepts_paths_within_project_root ... ok [INFO] [stdout] test output::text::policy::tests::appends_no_policy_summary_when_stats_absent ... ok [INFO] [stdout] test output::tests::text_output_groups_findings_by_public_lane ... ok [INFO] [stdout] test output::text::common::tests::location_detail_label_falls_back_to_byte_span ... ok [INFO] [stdout] test path::tests::normalizes_current_directory_components ... ok [INFO] [stdout] test path::tests::rejects_parent_directory_escape_from_project_root ... ok [INFO] [stdout] test path::tests::rejects_paths_outside_project_root ... ok [INFO] [stdout] test policy_os::tests::policy_action_warn_and_deny_convert_to_severity ... ok [INFO] [stdout] test policy_os::tests::evaluate_machine_policy_emits_root_and_finding_based_matches ... ok [INFO] [stdout] test external_validation::tests::ai_native_discovery_report_has_required_sections ... ok [INFO] [stdout] test policy_os::tests::policy_loader_requires_allowlist_for_allowlist_rules ... ok [INFO] [stdout] test policy_os::tests::policy_loader_rejects_relative_allow_base_dir ... ok [INFO] [stdout] test known_scan::tests::lintable_known_root_hints_have_canonical_routes ... ok [INFO] [stdout] test known_scan::tests::discover_known_roots_respects_scope_filters_and_existing_paths ... ok [INFO] [stdout] test known_scan::tests::inventory_lintable_root_splits_unrecognized_binary_and_excluded_files ... ok [INFO] [stdout] test path::tests::rejects_symlink_target_outside_project_root ... ok [INFO] [stdout] test sample_repo_tests::sample_repo_dirs_are_discoverable ... ok [INFO] [stdout] test external_validation::scan::repo::tests::materialize_repo_falls_back_to_git_when_archive_download_fails ... ok [INFO] [stdout] test external_validation::tests::report_renderer_emits_delta_and_phase_targets ... ok [INFO] [stdout] test external_validation::scan::repo::tests::materialize_repo_uses_curl_and_tar_when_marker_is_stale ... ok [INFO] [stdout] test compat_tests::stable_key_snapshot_matches ... ok [INFO] [stdout] test compat_tests::sarif_report_snapshot_matches ... ok [INFO] [stdout] test security_rule_catalog::tests::compat_entries_do_not_use_security_category ... ok [INFO] [stdout] test security_rule_catalog::tests::catalog_order_is_stable ... ok [INFO] [stdout] test security_rule_catalog::tests::all_shipped_security_rules_are_documented ... ok [INFO] [stdout] test security_rule_catalog::tests::governance_entries_do_not_use_security_category ... ok [INFO] [stdout] test sample_repo_tests::policy_mismatch_explain_config_is_informative ... ok [INFO] [stdout] test security_rule_catalog::tests::guidance_entries_do_not_use_security_category ... ok [INFO] [stdout] test security_rule_catalog::tests::markdown_escape_helpers_neutralize_tables_html_and_line_breaks ... ok [INFO] [stdout] test security_rule_catalog::tests::heuristic_entries_do_not_use_security_category ... ok [INFO] [stdout] test security_rule_catalog::tests::stable_entries_have_completed_metadata ... ok [INFO] [stdout] test shipped_rules::index::tests::shipped_rule_docs_urls_follow_public_pages_contract ... ok [INFO] [stdout] test security_rule_catalog::tests::heuristic_entries_remain_preview ... ok [INFO] [stdout] test security_rule_catalog::tests::shipped_rules_have_expected_default_preset_mapping ... ok [INFO] [stdout] test site_catalog::tests::checked_in_rule_and_preset_pages_have_no_orphans ... ok [INFO] [stdout] test site_catalog::tests::representative_preset_memberships_match_expectations ... ok [INFO] [stdout] test site_catalog::tests::catalog_identity_fields_are_unique ... ok [INFO] [stdout] test site_catalog::tests::catalog_paths_have_matching_checked_in_pages ... ok [INFO] [stdout] test sample_repo_tests::policy_mismatch_sample_repo_emits_preview_and_stable_findings ... ok [INFO] [stdout] test sample_repo_tests::mcp_heavy_sample_repo_emits_mcp_rule_set ... ok [INFO] [stdout] test security_rule_catalog::tests::catalog_render_matches_checked_in_markdown ... ok [INFO] [stdout] test sample_repo_tests::cursor_plugin_sample_repo_emits_plugin_rule_set ... ok [INFO] [stdout] test generated_docs::tests::generated_doc_artifacts_cover_expected_outputs_once ... ok [INFO] [stdout] test sample_repo_tests::fixable_comments_sample_repo_emits_fixable_comment_rules ... ok [INFO] [stdout] test site_catalog::tests::site_catalog_matches_checked_in_snapshot ... ok [INFO] [stdout] test external_validation::runner::tests::run_renders_report_for_known_package ... ok [INFO] [stdout] test external_validation::runner::tests::run_renders_reports_for_all_known_packages ... ok [INFO] [stdout] test sample_repo_tests::clean_sample_repo_stays_clean ... ok [INFO] [stdout] test security_rule_catalog::tests::detail_sections_cover_every_provider_and_rule ... ok [INFO] [stdout] test site_catalog::tests::security_rules_markdown_matches_site_catalog_matrix ... ok [INFO] [stdout] test sample_repo_tests::sample_repo_manifests_match_real_scans ... ok [INFO] [stdout] test sample_repo_tests::sample_repos_render_all_real_output_formats ... ok [INFO] [stderr] Running unittests src/main.rs (/opt/rustwide/target/debug/deps/lintai-9bbf36b396191050) [INFO] [stdout] test sample_repo_tests::sample_repos_are_deterministic_by_stable_key ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 211 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.11s [INFO] [stdout] [INFO] [stderr] Running unittests src/bin/lintai-external-validation.rs (/opt/rustwide/target/debug/deps/lintai_external_validation-0b02a34d46884468) [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 2 tests [INFO] [stdout] test tests::run_with_unknown_command_returns_failure_code ... ok [INFO] [stdout] test tests::run_with_known_render_report_command_succeeds_for_default_package ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stdout] [INFO] [stderr] Running unittests src/bin/render-security-rule-catalog.rs (/opt/rustwide/target/debug/deps/render_security_rule_catalog-d93d03d2245bca5d) [INFO] [stdout] running 2 tests [INFO] [stdout] test tests::command_invocation_is_executable ... ok [INFO] [stdout] test tests::catalog_is_non_empty ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s [INFO] [stdout] [INFO] [stderr] Running unittests src/bin/render-site-catalog.rs (/opt/rustwide/target/debug/deps/render_site_catalog-fe8255f1653d4b60) [INFO] [stdout] [INFO] [stdout] running 2 tests [INFO] [stdout] test tests::command_invocation_is_executable ... ok [INFO] [stdout] test tests::catalog_is_json_like ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s [INFO] [stdout] [INFO] [stderr] Running unittests src/bin/write-generated-docs.rs (/opt/rustwide/target/debug/deps/write_generated_docs-49bc4d1759341f43) [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stderr] Running tests/agent_plugin_command.rs (/opt/rustwide/target/debug/deps/agent_plugin_command-c89e1fcff5b34720) [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 2 tests [INFO] [stdout] test version_command_reports_release_identity ... ok [INFO] [stdout] test fixed_agent_plugin_policy_ignores_package_controlled_config ... ok [INFO] [stderr] Running tests/docs_commands.rs (/opt/rustwide/target/debug/deps/docs_commands-e46ea464c59e5dac) [INFO] [stdout] [INFO] [stdout] test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 1 test [INFO] [stderr] Running tests/docs_contract.rs (/opt/rustwide/target/debug/deps/docs_contract-c971b6d53a408098) [INFO] [stdout] test documented_commands_match_the_release_contract ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.90s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 22 tests [INFO] [stdout] test index_links_positioning_and_scope_doc ... ok [INFO] [stdout] test index_links_security_rules_catalog ... ok [INFO] [stdout] test docs_policy_mentions_graduation_gates ... ok [INFO] [stdout] test readme_and_release_note_document_install_status ... ok [INFO] [stdout] test public_release_workflow_matches_shipping_contract ... ok [INFO] [stdout] test architecture_decisions_document_current_fix_surface ... ok [INFO] [stdout] test readme_documents_current_positioning_posture ... ok [INFO] [stdout] test architecture_decisions_match_current_provider_backend_model ... ok [INFO] [stdout] test public_release_shipping_checklist_is_checked_in ... ok [INFO] [stdout] test release_roadmap_and_shipping_checklist_lock_release_only_distribution ... ok [INFO] [stdout] test architecture_decisions_match_current_exit_code_contract ... ok [INFO] [stdout] test security_rules_snapshot_does_not_mix_in_strategy_appendix ... ok [INFO] [stdout] test index_does_not_contain_stale_iteration_seven_status ... ok [INFO] [stdout] test release_verification_script_matches_trust_chain_contract ... ok [INFO] [stdout] test index_links_public_release_shipping_checklist ... ok [INFO] [stdout] test index_links_public_release_doc ... ok [INFO] [stdout] test release_installers_keep_template_guards_render_safe ... ok [INFO] [stdout] test index_links_v0_1_to_1_0_roadmap ... ok [INFO] [stdout] test v0_1_to_1_0_roadmap_documents_precision_first_sequence ... ok [INFO] [stdout] test workflow_readme_mentions_public_release_workflow ... ok [INFO] [stdout] test public_release_doc_exists_and_matches_current_posture ... ok [INFO] [stdout] test release_note_is_checked_in_and_grounded_in_wave_two ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 22 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s [INFO] [stdout] [INFO] [stderr] Running tests/external_validation_contract.rs (/opt/rustwide/target/debug/deps/external_validation_contract-91070068e00d69ac) [INFO] [stdout] [INFO] [stdout] running 20 tests [INFO] [stdout] test ai_native_discovery_report_has_required_sections ... ok [INFO] [stdout] test external_validation_docs_are_linked_from_index ... ok [INFO] [stdout] test external_validation_report_matches_current_ledger_schema ... ok [INFO] [stdout] test ai_native_discovery_shortlist_has_expected_shape ... ok [INFO] [stdout] test github_actions_extension_report_has_required_sections ... ok [INFO] [stdout] test tool_json_extension_report_has_required_sections ... ok [INFO] [stdout] test tool_json_extension_shortlist_has_expected_shape ... ok [INFO] [stdout] test server_json_extension_report_has_required_sections ... ok [INFO] [stdout] test ai_native_discovery_ledger_starts_at_wave_one ... ok [INFO] [stdout] test server_json_extension_shortlist_has_expected_shape ... ok [INFO] [stdout] test github_actions_extension_shortlist_has_expected_shape ... ok [INFO] [stdout] test external_validation_repos_reference_valid_categories_and_statuses ... ok [INFO] [stdout] test server_json_extension_ledger_matches_shortlist ... ok [INFO] [stdout] test external_validation_shortlist_entries_include_required_fields ... ok [INFO] [stdout] test external_validation_shortlist_has_expected_category_mix ... ok [INFO] [stdout] test tool_json_extension_ledger_matches_shortlist_and_wave_marker ... ok [INFO] [stdout] test github_actions_extension_ledger_matches_shortlist ... ok [INFO] [stdout] test external_validation_shortlist_and_ledger_cover_the_same_repo_set ... ok [INFO] [stdout] test external_validation_ledger_entries_use_allowed_verdicts ... ok [INFO] [stdout] test external_validation_wave_markers_are_present ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s [INFO] [stdout] [INFO] [stderr] Running tests/fix_commands.rs (/opt/rustwide/target/debug/deps/fix_commands-fcf76f40226cf68a) [INFO] [stdout] [INFO] [stdout] running 7 tests [INFO] [stdout] test fix_preview_surfaces_suggestions_for_mcp_repo_without_planning_fixes ... ok [INFO] [stdout] test fix_apply_can_be_filtered_to_one_rule ... ok [INFO] [stdout] test fix_preview_reports_planned_fixes_without_mutating_files ... ok [INFO] [stdout] test fix_apply_surfaces_suggestions_without_mutating_suggestion_only_repo ... ok [INFO] [stdout] test fix_preview_rule_filter_limits_suggestions ... ok [INFO] [stdout] test fix_apply_reports_conflicts_deterministically ... ok [INFO] [stdout] test fix_apply_removes_comment_spans_and_follow_up_scan_is_clean ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s [INFO] [stdout] [INFO] [stderr] Running tests/inventory_os_commands.rs (/opt/rustwide/target/debug/deps/inventory_os_commands-fee59f382dbdeb2c) [INFO] [stdout] [INFO] [stdout] running 10 tests [INFO] [stdout] test inventory_os_diff_rejects_incompatible_schema_version ... ok [INFO] [stdout] test inventory_os_exits_two_on_runtime_errors ... ok [INFO] [stdout] test inventory_os_respects_client_filter ... ok [INFO] [stdout] test inventory_os_diff_reports_changed_roots_newly_lintable_risk_increase_and_new_findings ... ok [INFO] [stdout] test inventory_os_system_scope_is_truthful_when_no_system_roots_exist ... ok [INFO] [stdout] test inventory_os_user_scope_reports_provenance_and_quiet_recommended_default ... ok [INFO] [stdout] test inventory_os_write_baseline_persists_snapshot_contract ... ok [INFO] [stdout] test inventory_os_diff_reports_removed_roots ... ok [INFO] [stdout] test inventory_os_explicit_presets_enable_broader_machine_review ... ok [INFO] [stdout] test inventory_os_diff_reports_new_roots ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.43s [INFO] [stdout] [INFO] [stderr] Running tests/known_scan_commands.rs (/opt/rustwide/target/debug/deps/known_scan_commands-cebaf33c40379515) [INFO] [stdout] [INFO] [stdout] running 14 tests [INFO] [stdout] test scan_known_reports_discovered_only_roots_without_fake_findings ... ok [INFO] [stdout] test scan_known_continue_mcp_servers_directory_is_lintable ... ok [INFO] [stdout] test scan_known_exits_two_on_runtime_errors ... ok [INFO] [stdout] test scan_known_mixed_modes_reports_both_lintable_and_discovered_only_roots ... ok [INFO] [stdout] test scan_known_unsupported_directory_roots_stay_discovered_only ... ok [INFO] [stdout] test scan_known_global_discovers_roots_and_stays_quiet_by_default ... ok [INFO] [stdout] test scan_known_global_respects_explicit_presets_for_machine_artifacts ... ok [INFO] [stdout] test scan_known_goose_and_windsurf_aliases_are_lintable ... ok [INFO] [stdout] test scan_known_directory_based_markdown_roots_are_lintable ... ok [INFO] [stdout] test scan_known_rules_alias_files_are_lintable ... ok [INFO] [stdout] test scan_known_json_respects_client_filter_and_reports_discovered_roots ... ok [INFO] [stdout] test scan_known_vscode_kiro_and_amazon_q_mcp_configs_are_lintable ... ok [INFO] [stdout] test scan_known_instruction_alias_files_are_lintable ... ok [INFO] [stdout] test scan_known_claude_desktop_and_copilot_cli_configs_are_lintable ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s [INFO] [stdout] [INFO] [stderr] Running tests/legacy_contract.rs (/opt/rustwide/target/debug/deps/legacy_contract-6351123f66231fa5) [INFO] [stdout] [INFO] [stdout] running 6 tests [INFO] [stdout] test root_engine_surface_does_not_export_internal_helpers ... ok [INFO] [stdout] test internal_runner_schema_version_is_absent ... ok [INFO] [stdout] test lintai_testing_surface_does_not_export_dead_helpers ... ok [INFO] [stdout] test provider_capabilities_and_ruleprovider_execution_knobs_are_absent ... ok [INFO] [stdout] test legacy_provider_registration_strings_are_absent ... ok [INFO] [stdout] test lifecycle_hooks_and_deprecated_rule_tier_are_absent ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 11 tests [INFO] [stderr] Running tests/policy_os_commands.rs (/opt/rustwide/target/debug/deps/policy_os_commands-82739b52533bcbaf) [INFO] [stdout] test policy_os_high_risk_discovered_only_emits_warn_match ... ok [INFO] [stdout] test policy_os_global_shell_wrapper_mcp_can_opt_into_threat_review_scan_profile ... ok [INFO] [stdout] test policy_os_sarif_contains_policy_rule_ids ... ok [INFO] [stdout] test policy_os_exits_two_on_runtime_errors ... ok [INFO] [stdout] test policy_os_rejects_unsupported_schema_version ... ok [INFO] [stdout] test policy_os_allowlisted_client_and_base_dir_stays_clean ... ok [INFO] [stdout] test policy_os_explicit_recommended_preset_can_keep_output_quiet ... ok [INFO] [stdout] test policy_os_unapproved_client_emits_deny_match ... ok [INFO] [stdout] test policy_os_trust_disable_warn_does_not_fail_exit_code ... ok [INFO] [stdout] test policy_os_plaintext_auth_uses_machine_policy_default_scan_profile ... ok [INFO] [stdout] test policy_os_unapproved_base_dir_emits_deny_match ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s [INFO] [stdout] [INFO] [stderr] Running tests/public_entrypoints.rs (/opt/rustwide/target/debug/deps/public_entrypoints-0f3deaf27d1ae76b) [INFO] [stdout] [INFO] [stdout] running 16 tests [INFO] [stdout] test advisory_db_update_rejects_wrong_ecosystem_snapshot ... ok [INFO] [stdout] test readme_root_cargo_config_schema_command_is_truthful ... ok [INFO] [stdout] test advisory_db_export_bundled_command_outputs_snapshot_json ... ok [INFO] [stdout] test advisory_scan_invalid_custom_snapshot_exits_with_execution_error ... ok [INFO] [stdout] test advisory_scan_invalid_tracked_package_version_exits_with_runtime_error ... ok [INFO] [stdout] test scan_color_always_keeps_json_uncolored ... ok [INFO] [stdout] test help_subcommand_prints_specific_usage ... ok [INFO] [stdout] test scan_color_always_emits_ansi_for_text_output ... ok [INFO] [stdout] test advisory_db_update_rejects_invalid_generated_at_timestamp ... ok [INFO] [stdout] test advisory_scan_can_use_custom_snapshot_override ... ok [INFO] [stdout] test subcommand_help_flag_prints_specific_usage ... ok [INFO] [stdout] test advisory_scan_missing_tracked_package_version_exits_with_runtime_error ... ok [INFO] [stdout] test readme_root_cargo_help_command_is_truthful ... ok [INFO] [stdout] test advisory_scan_malformed_pnpm_key_exits_with_runtime_error ... ok [INFO] [stdout] test advisory_db_update_rejects_invalid_semver_bounds ... ok [INFO] [stdout] test scan_explicit_presets_ignore_repo_local_preset_activation ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s [INFO] [stdout] [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_dep_vulns-8210526c5567fd5f) [INFO] [stdout] [INFO] [stdout] running 30 tests [INFO] [stdout] test snapshot::tests::invalid_introduced_bound_does_not_match ... ok [INFO] [stdout] test catalog::tests::dep_vuln_catalog_entries_convert_to_shared_catalog_entries ... ok [INFO] [stdout] test catalog::tests::shared_dep_vuln_catalog_entries_stay_in_sync_with_local_catalog_entries ... ok [INFO] [stdout] test snapshot::tests::invalid_fixed_bound_does_not_match ... ok [INFO] [stdout] test snapshot::tests::normalize_snapshot_json_rejects_wrong_ecosystem ... ok [INFO] [stdout] test snapshot::tests::normalize_snapshot_json_rejects_empty_generated_at ... ok [INFO] [stdout] test snapshot::tests::normalize_snapshot_json_rejects_empty_snapshot_revision ... ok [INFO] [stdout] test snapshot::tests::normalize_snapshot_json_rejects_invalid_generated_at_timestamp ... ok [INFO] [stdout] test provider::tests::workspace_check_skips_when_advisory_rule_is_inactive ... ok [INFO] [stdout] test snapshot::tests::normalize_snapshot_json_rejects_invalid_semver_bounds ... ok [INFO] [stdout] test snapshot::tests::normalize_snapshot_json_rejects_duplicate_advisory_ids ... ok [INFO] [stdout] test snapshot::tests::normalize_snapshot_json_rejects_empty_range ... ok [INFO] [stdout] test snapshot::tests::load_snapshot_file_rejects_wrong_ecosystem ... ok [INFO] [stdout] test snapshot::tests::load_snapshot_file_accepts_valid_npm_snapshot ... ok [INFO] [stdout] test snapshot::tests::normalization_sorts_and_deduplicates_snapshot_fields ... ok [INFO] [stdout] test catalog::tests::invalid_shared_dep_vuln_entry_returns_error_instead_of_panicking ... ok [INFO] [stdout] test snapshot::tests::normalize_snapshot_json_rejects_empty_source ... ok [INFO] [stdout] test snapshot::tests::load_snapshot_file_rejects_wrong_schema_version ... ok [INFO] [stdout] test tests::invalid_semver_for_non_tracked_package_does_not_fail_scan ... ok [INFO] [stdout] test tests::finds_vulnerable_npm_shrinkwrap_dependency ... ok [INFO] [stdout] test tests::finds_vulnerable_pnpm_dependency ... ok [INFO] [stdout] test tests::malformed_pnpm_key_for_advisory_tracked_package_fails_closed ... ok [INFO] [stdout] test tests::ignores_fixed_package_lock_dependency ... ok [INFO] [stdout] test tests::finds_vulnerable_package_lock_dependency ... ok [INFO] [stdout] test tests::missing_version_for_advisory_tracked_package_fails_closed ... ok [INFO] [stdout] test tests::invalid_semver_for_advisory_tracked_package_fails_closed ... ok [INFO] [stdout] test tests::finding_metadata_includes_fixed_versions_and_snapshot_provenance ... ok [INFO] [stdout] test tests::deduplicates_across_multiple_lockfiles_and_keeps_all_paths ... ok [INFO] [stdout] test tests::dep_vuln_corpus_benign_cases_scan_cleanly ... ok [INFO] [stdout] test tests::dep_vuln_corpus_malicious_cases_trigger_expected_findings ... ok [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_engine-3499ce394fc8cabf) [INFO] [stdout] [INFO] [stdout] test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.33s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 65 tests [INFO] [stdout] test config::schema::tests::schema_matches_runtime_contract_for_rules_and_reserved_sections ... ok [INFO] [stdout] test config::schema::tests::schema_mentions_reserved_sections_and_core_sections ... ok [INFO] [stdout] test config::tests::rejects_project_root_false ... ok [INFO] [stdout] test config::tests::rejects_unknown_top_level_keys ... ok [INFO] [stdout] test config::schema::tests::checked_in_schema_matches_generated_output ... ok [INFO] [stdout] test detector::tests::detects_v0_1_file_types ... ok [INFO] [stdout] test config::tests::does_not_cascade_to_parent_config ... ok [INFO] [stdout] test config::tests::rejects_unknown_builtin_preset ... ok [INFO] [stdout] test config::tests::default_config_includes_dockerfile_paths ... ok [INFO] [stdout] test config::tests::strict_preset_extends_recommended_default_membership ... ok [INFO] [stdout] test config::tests::resolves_overrides_for_specific_file ... ok [INFO] [stdout] test config::tests::advisory_preset_can_enable_lockfile_lane ... ok [INFO] [stdout] test config::tests::supply_chain_preset_can_enable_sidecar_lane ... ok [INFO] [stdout] test config::tests::default_config_uses_recommended_preset_only ... ok [INFO] [stdout] test config::tests::explicit_rule_override_can_opt_in_inactive_rule ... ok [INFO] [stdout] test engine_tests::continues_after_invalid_utf8_file ... ok [INFO] [stdout] test config::tests::add_detection_override_for_kind_uses_canonical_route ... ok [INFO] [stdout] test config::tests::surface_presets_can_opt_in_preview_rules_for_selected_surface ... ok [INFO] [stdout] test config::tests::explain_config_reports_detection_override_and_capabilities ... ok [INFO] [stdout] test config::tests::guidance_preset_can_enable_guidance_lane ... ok [INFO] [stdout] test engine::workspace::projection::tests::workspace_projection_keeps_workspace_mapping_and_active_rules ... ok [INFO] [stdout] test engine_tests::does_not_discover_symlinked_directory_outside_project_root ... ok [INFO] [stdout] test engine_tests::deduplicates_findings_by_stable_key_keeping_stronger_one ... ok [INFO] [stdout] test engine_tests::direct_scan_of_nested_git_repository_still_works ... ok [INFO] [stdout] test config::tests::builtin_presets_can_enable_compat_lane ... ok [INFO] [stdout] test engine_tests::derives_line_columns_for_findings ... ok [INFO] [stdout] test engine_tests::does_not_descend_into_nested_git_worktree_during_broad_scan ... ok [INFO] [stdout] test engine_tests::drops_invalid_fix_and_keeps_finding ... ok [INFO] [stdout] test engine_tests::gemini_dot_settings_is_scanned_as_mcp_config ... ok [INFO] [stdout] test engine_tests::agent_plugins_v1_manifest_and_fixed_components_are_scanned ... ok [INFO] [stdout] test engine_tests::keeps_findings_when_provider_reports_execution_errors ... ok [INFO] [stdout] test engine_tests::does_not_descend_into_nested_git_repository_during_broad_scan ... ok [INFO] [stdout] test engine_tests::gemini_extension_is_scanned_as_mcp_config ... ok [INFO] [stdout] test config::tests::engine_config_can_be_built_from_explicit_builtin_presets ... ok [INFO] [stdout] test engine_tests::normalizes_non_canonical_stable_key_and_reports_diagnostic ... ok [INFO] [stdout] test engine_tests::manifest_backed_plugin_commands_ignore_missing_outside_repo_and_non_markdown_targets ... ok [INFO] [stdout] test engine_tests::keeps_fix_when_finding_carries_safe_fix ... ok [INFO] [stdout] test engine_tests::drops_invalid_finding_span_and_reports_diagnostic ... ok [INFO] [stdout] test engine_tests::manifest_backed_plugin_targets_are_scanned ... ok [INFO] [stdout] test engine_tests::manifest_backed_plugin_targets_ignore_missing_or_escaping_paths ... ok [INFO] [stdout] test engine_tests::manifest_backed_plugin_hooks_require_semantic_command_shape ... ok [INFO] [stdout] test engine_tests::manifest_backed_plugin_commands_are_scanned_from_file_dir_array_and_glob_targets ... ok [INFO] [stdout] test engine_tests::rejects_duplicate_provider_ids ... ok [INFO] [stdout] test engine_tests::rejects_zero_timeout_provider_contract ... ok [INFO] [stdout] test engine_tests::typed_file_provider_backend_executes_in_engine ... ok [INFO] [stdout] test engine_tests::preserves_timeout_runtime_kind_when_provider_reports_timeout ... ok [INFO] [stdout] test normalize::tests::normalizes_absolute_paths_for_display ... ok [INFO] [stdout] test engine_tests::recovers_invalid_yaml_frontmatter_as_diagnostic ... ok [INFO] [stdout] test normalize::tests::normalizes_paths_to_relative_forward_slashes ... ok [INFO] [stdout] test engine_tests::unrelated_plugin_json_is_not_treated_as_agent_plugins_manifest ... ok [INFO] [stdout] test engine_tests::suppression_hook_filters_workspace_findings ... ok [INFO] [stdout] test engine_tests::repeated_multi_file_scans_stay_deterministic ... ok [INFO] [stdout] test engine_tests::suppression_hook_filters_findings ... ok [INFO] [stdout] test engine_tests::summary_records_provider_metrics_for_file_and_workspace_phases ... ok [INFO] [stdout] test engine_tests::skips_undeclared_provider_rule_and_reports_diagnostic ... ok [INFO] [stdout] test engine_tests::typed_workspace_provider_backend_executes_in_engine ... ok [INFO] [stdout] test engine_tests::records_per_file_provider_execution_errors_without_findings ... ok [INFO] [stdout] test engine_tests::vscode_settings_requires_semantic_mcp_shape ... ok [INFO] [stdout] test engine_tests::workspace_findings_derive_line_columns_without_rebuilding_scan_context ... ok [INFO] [stdout] test engine_tests::records_workspace_provider_execution_errors ... ok [INFO] [stdout] test engine_tests::workspace_provider_emits_findings_after_parse_pass ... ok [INFO] [stdout] test suppress::tests::reports_excessive_suppressions_per_file ... ok [INFO] [stdout] test suppress::tests::reports_unused_suppress_entries ... ok [INFO] [stdout] test engine_tests::rejects_supported_symlink_that_resolves_outside_project_root ... ok [INFO] [stdout] test engine_tests::preserves_workspace_timeout_runtime_kind_when_provider_reports_timeout ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 65 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.50s [INFO] [stdout] [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_fix-79f68d68de5d950e) [INFO] [stdout] [INFO] [stdout] running 4 tests [INFO] [stdout] test tests::plans_non_overlapping_fixes ... ok [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_parse-f11eb9cecb17a55d) [INFO] [stdout] test tests::replaces_requested_range ... ok [INFO] [stdout] test tests::detects_overlapping_fixes_deterministically ... ok [INFO] [stdout] test tests::applies_planned_fixes_in_descending_offset_order ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 24 tests [INFO] [stdout] test limits::tests::rejects_structured_values_that_are_too_deep ... ok [INFO] [stdout] test tests::json_rejects_invalid_document ... ok [INFO] [stdout] test tests::json_parses_value ... ok [INFO] [stdout] test tests::markdown_rejects_unterminated_frontmatter ... ok [INFO] [stdout] test tests::json_parses_jsonc_comments ... ok [INFO] [stdout] test tests::shell_extracts_lines ... ok [INFO] [stdout] test tests::yaml_parses_value ... ok [INFO] [stdout] test tests::markdown_keeps_frontmatter_as_region_and_raw_value ... ok [INFO] [stdout] test tests::markdown_recovers_from_invalid_yaml_frontmatter ... ok [INFO] [stdout] test tests::markdown_supports_bom_prefixed_frontmatter ... ok [INFO] [stdout] test tests::markdown_classifies_code_blocks_and_html_comments ... ok [INFO] [stdout] test tests::markdown_frontmatter_recovers_when_shape_limit_is_exceeded ... ok [INFO] [stdout] test limits::tests::rejects_oversized_structured_document ... ok [INFO] [stdout] test tests::yaml_rejects_invalid_document ... ok [INFO] [stdout] test tests::yaml_rejects_documents_that_exceed_byte_limit ... ok [INFO] [stdout] test limits::tests::rejects_structured_values_with_too_many_nodes ... ok [INFO] [stdout] test tests::json_roundtrips_generated_values ... ok [INFO] [stdout] test tests::json_rejects_documents_that_exceed_byte_limit ... ok [INFO] [stdout] test tests::yaml_roundtrips_generated_values ... ok [INFO] [stdout] test tests::markdown_frontmatter_roundtrips_generated_yaml ... ok [INFO] [stdout] test tests::markdown_parser_keeps_regions_bounded_on_arbitrary_text ... ok [INFO] [stdout] test tests::yaml_parser_does_not_panic_on_arbitrary_utf8 ... ok [INFO] [stdout] test tests::json_parser_does_not_panic_on_arbitrary_utf8 ... ok [INFO] [stdout] test tests::markdown_parser_does_not_panic_on_arbitrary_utf8 ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.79s [INFO] [stdout] [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_policy-7a505d2c08e3e65f) [INFO] [stdout] [INFO] [stdout] running 33 tests [INFO] [stdout] test analysis::tests::capabilities_conflict_detects_network_disallowed_when_skill_requests_access ... ok [INFO] [stdout] test analysis::tests::artifact_observes_exec_ignores_non_mcp_artifacts ... ok [INFO] [stdout] test analysis::tests::exec_forbidden_checks_none_only ... ok [INFO] [stdout] test analysis::tests::workspace_json_semantics_extracts_json_only ... ok [INFO] [stdout] test analysis::tests::artifact_observes_network_detects_shell_content ... ok [INFO] [stdout] test catalog::tests::shared_policy_catalog_entries_stay_in_sync_with_local_catalog_entries ... ok [INFO] [stdout] test evidence::tests::first_match_location_returns_none_when_no_needle_matches ... ok [INFO] [stdout] test evidence::tests::first_match_location_returns_the_first_matching_span ... ok [INFO] [stdout] test evidence::tests::observed_location_targets_jsonish_artifact_needles ... ok [INFO] [stdout] test evidence::tests::observed_message_maps_known_rules ... ok [INFO] [stdout] test evidence::tests::policy_finding_deny_mode_forces_deny_severity ... ok [INFO] [stdout] test evidence::tests::observed_location_defaults_to_capability_keyword_for_other_artifacts ... ok [INFO] [stdout] test evidence::tests::observed_location_targets_hook_needles ... ok [INFO] [stdout] test evidence::tests::policy_finding_uses_hint_location_when_present ... ok [INFO] [stdout] test evidence::tests::policy_finding_warn_mode_keeps_default_severity ... ok [INFO] [stdout] test provider::tests::workspace_check_no_project_capabilities_reports_no_findings ... ok [INFO] [stdout] test provider::tests::workspace_check_flags_frontmatter_conflict_when_skill_requests_more_capability ... ok [INFO] [stdout] test provider::tests::workspace_check_flags_exec_and_network_mismatches ... ok [INFO] [stdout] test provider::tests::workspace_check_only_reports_active_policy_rule_codes ... ok [INFO] [stdout] test provider::tests::workspace_check_skips_when_policy_rules_are_inactive ... ok [INFO] [stdout] test evidence::tests::policy_finding_uses_full_content_span_without_hint ... ok [INFO] [stdout] test catalog::tests::policy_catalog_entries_convert_to_shared_catalog_entries ... ok [INFO] [stdout] test analysis::tests::artifact_observes_network_detects_nested_json_reference ... ok [INFO] [stdout] test analysis::tests::artifact_observes_network_does_not_flag_non_network_artifacts ... ok [INFO] [stdout] test analysis::tests::artifact_observes_exec_rejects_non_shell_command ... ok [INFO] [stdout] test analysis::tests::artifact_observes_exec_reports_hook_script_always_true ... ok [INFO] [stdout] test analysis::tests::contains_shell_wrapper_checks_direct_and_nested_structures ... ok [INFO] [stdout] test analysis::tests::network_forbidden_checks_none_only ... ok [INFO] [stdout] test analysis::tests::capabilities_conflict_ignores_if_skill_does_not_exceed_project_limits ... ok [INFO] [stdout] test analysis::tests::contains_network_reference_checks_recursive_json_values ... ok [INFO] [stdout] test analysis::tests::capabilities_conflict_detects_exec_disallowed_when_skill_requests_exec ... ok [INFO] [stdout] test analysis::tests::artifact_observes_exec_detects_shell_wrapper_in_mcp_config ... ok [INFO] [stdout] test catalog::tests::invalid_shared_policy_entry_returns_error_instead_of_panicking ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 33 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s [INFO] [stdout] [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_runtime-644986a9b3bb5a30) [INFO] [stdout] [INFO] [stdout] running 20 tests [INFO] [stdout] test backend::tests::file_backend_reports_workspace_phase_misuse ... ok [INFO] [stdout] test backend::tests::file_workspace_backends_keep_metadata_and_scope ... ok [INFO] [stdout] test protocol::tests::runner_phase_serializes_to_snake_case ... ok [INFO] [stdout] test subprocess::io::tests::read_child_output_collects_stdout_and_stderr ... ok [INFO] [stdout] test protocol::tests::runner_response_round_trips_json ... ok [INFO] [stdout] test subprocess::tests::decode_response_reports_invalid_json ... ok [INFO] [stdout] test subprocess::tests::prepare_request_includes_json_payload ... ok [INFO] [stdout] test subprocess::io::tests::read_optional_stderr_returns_empty_when_missing ... ok [INFO] [stdout] test backend::tests::inprocess_backend_exposes_constructor_overrides ... ok [INFO] [stdout] test backend::tests::workspace_backend_reports_file_phase_misuse ... ok [INFO] [stdout] test protocol::tests::runner_phase_round_trips_from_json ... ok [INFO] [stdout] test subprocess::tests::error_when_executable_resolver_fails ... ok [INFO] [stdout] test protocol::tests::runner_request_handles_provider_payloads ... ok [INFO] [stdout] test subprocess::child::tests::terminate_child_stops_running_process ... ok [INFO] [stdout] test subprocess::tests::decode_response_parses_runner_result ... ok [INFO] [stdout] test subprocess::wait::tests::wait_policy_persists_timeout_and_interval ... ok [INFO] [stdout] test subprocess::tests::run_child_reports_encode_and_resolve_errors ... ok [INFO] [stdout] test subprocess::wait::tests::wait_for_exit_returns_status_for_fast_exit ... ok [INFO] [stdout] test protocol::tests::runner_request_round_trips_json ... ok [INFO] [stdout] test subprocess::wait::tests::wait_for_exit_times_out_and_reports_error ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s [INFO] [stdout] [INFO] [stderr] Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/lintai_testing-cabff47e95793e69) [INFO] [stdout] [INFO] [stdout] running 25 tests [INFO] [stdout] test lib_tests::parses_manifest_with_stable_key_snapshot_kind ... ok [INFO] [stdout] test lib_tests::parses_valid_case_manifest ... ok [INFO] [stdout] test lib_tests::load_rejects_legacy_bucket_scoped_manifest_shapes ... ok [INFO] [stdout] test lib_tests::assert_case_summary_accepts_expected_empty_summary ... ok [INFO] [stdout] test lib_tests::assert_snapshot_passes_on_exact_match ... ok [INFO] [stdout] test lib_tests::assert_case_summary_accepts_expected_parse_runtime_error ... ok [INFO] [stdout] test lib_tests::rejects_manifest_with_invalid_kind ... ok [INFO] [stdout] test lib_tests::rejects_manifest_missing_id ... ok [INFO] [stdout] test lib_tests::rejects_manifest_with_invalid_runtime_error_kind ... ok [INFO] [stdout] test lib_tests::rejects_manifest_with_invalid_snapshot_kind ... ok [INFO] [stdout] test lib_tests::top_level_iteration_one_directories_exist ... ok [INFO] [stdout] test lib_tests::scan_case_reports_invalid_case_root ... ok [INFO] [stdout] test lib_tests::snapshot_path_uses_expected_extensions ... ok [INFO] [stdout] test lib_tests::stable_keys_text_is_deterministic_and_ordered ... ok [INFO] [stdout] test lib_tests::placeholder_cases_are_discoverable ... ok [INFO] [stdout] test lib_tests::discover_case_dirs_returns_sorted_case_roots ... ok [INFO] [stdout] test lib_tests::scan_case_uses_real_workspace_config_path ... ok [INFO] [stdout] test lib_tests::assert_case_summary_rejects_wrong_skipped_file_count - should panic ... ok [INFO] [stdout] test lib_tests::assert_case_summary_rejects_wrong_scanned_file_count - should panic ... ok [INFO] [stdout] test lib_tests::assert_case_summary_rejects_runtime_error_mismatch - should panic ... ok [INFO] [stdout] test lib_tests::assert_case_summary_rejects_wrong_runtime_error_kind - should panic ... ok [INFO] [stdout] test lib_tests::assert_snapshot_rejects_drift - should panic ... ok [INFO] [stdout] test lib_tests::assert_case_summary_rejects_diagnostics_mismatch - should panic ... ok [INFO] [stdout] test lib_tests::assert_case_summary_rejects_unexpected_present_rule - should panic ... ok [INFO] [stdout] test lib_tests::checked_in_case_manifests_are_canonical ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s [INFO] [stdout] [INFO] [stderr] Running unittests src/bin/normalize-case-manifests.rs (/opt/rustwide/target/debug/deps/normalize_case_manifests-ec5a44d45f90c2e5) [INFO] [stdout] [INFO] [stdout] running 1 test [INFO] [stderr] Doc-tests lintai_adapters [INFO] [stdout] test tests::legacy_compat_loader_preserves_expected_findings_for_bucket_scoped_manifests ... ok [INFO] [stdout] [INFO] [stdout] test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_ai_security [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_api [INFO] [stderr] Doc-tests lintai_builtins [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_cli [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_dep_vulns [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_engine [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_fix [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_parse [INFO] [stderr] Doc-tests lintai_policy [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_runtime [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] [stderr] Doc-tests lintai_testing [INFO] [stdout] [INFO] [stdout] running 0 tests [INFO] [stdout] [INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s [INFO] [stdout] [INFO] running `Command { std: "docker" "inspect" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f", kill_on_drop: false }` [INFO] running `Command { std: "docker" "rm" "-f" "c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f", kill_on_drop: false }` [INFO] [stdout] c63aa55e6214cf2cc078953bb48d6e38f95dd1957f55362eac7584abac9f065f