cayce 6ddf76983b regla permanente de secretos: test anti-patrones + hook de journald ...

Nueva regla del operador (2026-10-31): los ficheros de secretos solo se
inspeccionan con herramientas que no muestran valores (jq keys, grep -c,
stat). Prohibido cat/grep -r sobre .env y volcar errores con DSN.

- tests/test_no_credential_patterns.py: 3 tests — DSN con credencial
  literal fuera de placeholders, nsec bech32 versionado, tokens hex de
  64 chars fuera de tests/.
- scripts/check-credential-leaks.sh: hook que falla si journald
  reciente contiene DSN con contraseña o nsec (redactando el valor en
  la salida). Sin timer propio (no autorizado); ejecutar manual o desde
  cron del operador.

Contexto: la rotación del rol hardcap y el DSN filtrado a journald por
el test del gate (corregido; la credencial filtrada ya está rotada).

2026-10-31 18:00:26 +00:00

..

integration

identity: Próspera agentic-companies pilot framing — no personal names

2026-10-20 02:29:54 +00:00

conftest.py

audit-1 (critical 1): mandatory operator signatures bound to content+deployment

2026-10-20 02:20:09 +00:00

test_audit_hardening.py

audit-3: append-only audit log + strict legacy-prefix rule + anchor cross-check

2026-10-28 19:56:50 +00:00

test_cli.py

skeleton: package, schema, config, CLI, alembic, CI, deploy, docs

2026-10-19 21:35:50 +00:00

test_executor.py

identity: Próspera agentic-companies pilot framing — no personal names

2026-10-20 02:29:54 +00:00

test_maild.py

audit-D16: operator key must never be an agent identity

2026-10-28 19:51:04 +00:00

test_models.py

identity: Próspera agentic-companies pilot framing — no personal names

2026-10-20 02:29:54 +00:00

test_monitor.py

audit-4: serialized audit chain + legacy genesis + daily Nostr anchoring

2026-10-20 02:20:56 +00:00

test_no_credential_patterns.py

regla permanente de secretos: test anti-patrones + hook de journald

2026-10-31 18:00:26 +00:00

test_no_self_approval.py

audit-D16: operator key must never be an agent identity

2026-10-28 19:51:04 +00:00

test_publisher.py

identity: Próspera agentic-companies pilot framing — no personal names

2026-10-20 02:29:54 +00:00

test_scanner.py

fix: address external audit — criticals 1-5 + mediums

2026-10-19 23:06:29 +00:00

test_spanish_negations.py

audit-4: classifier understands Spanish negations (veto unchanged)

2026-10-28 19:59:44 +00:00