open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-20 16:07:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(ql3): admit external secret reconciliation review

Browse Source
This commit is contained in:
whyour
2026-09-02 03:25:19 +08:00
parent a95ed67fe8
commit 950f638998
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/ql3-local-alpha-reconciliation-decision-fixture.cjs
+8 -1
View File
@@ -289,7 +289,14 @@ function completionReviewFixture(root, output) {
const decisions = []; const decisions = [];
for (const fact of facts) { for (const fact of facts) {
if (fact.decisionRequirement === 'informational') continue; if (fact.decisionRequirement === 'informational') continue;
if (fact.decisionRequirement === 'blocked') { const externallyRecoverableSecretConfig =
fact.decisionRequirement === 'blocked' &&
fact.domain === 'secret_and_config' &&
fact.reason === 'secret_custody_required';
if (
fact.decisionRequirement === 'blocked' &&
!externallyRecoverableSecretConfig
) {
fail('completion review fixture refuses blocked diagnostic facts'); fail('completion review fixture refuses blocked diagnostic facts');
} }
const automationTable = const automationTable =
test/back/ql3LocalAlphaReconciliationDecisionFixture.test.cjs
+2 -1
View File
@@ -298,7 +298,8 @@ function completionReviewState(t) {
: 'QingLong3Secrets' : 'QingLong3Secrets'
: 'QingLong3Runs', : 'QingLong3Runs',
rowCount: '1', rowCount: '1',
decisionRequirement: 'required', decisionRequirement:
domain === 'secret_and_config' ? 'blocked' : 'required',
reason: reason:
domain === 'run_history' domain === 'run_history'
? 'historical_preservation_required' ? 'historical_preservation_required'