Test conflicting replicated ops are rejected

This commit is contained in:
Eric Wendland 2026-05-22 14:22:07 +02:00
commit 6f2fb53132
2 changed files with 291 additions and 2 deletions

View file

@ -25,7 +25,7 @@ Implementation order:
keychain/auth operations are rejected and not imported.
- `[x]` Add initial two-daemon tests proving invalidly signed replicated
keychain/auth operations are rejected and not imported.
- `[ ]` Add tests proving conflicting replicated keychain/auth records do
- `[x]` Add tests proving conflicting replicated keychain/auth records do
not mutate trust/resource state.
- `[ ]` Improve `auth explain` diagnostics enough for operators to
distinguish discovered-only peers, missing endpoint bindings, missing
@ -75,7 +75,7 @@ Implementation order:
local trust or resource state.
- `[x]` Tests assert invalidly signed replicated keychain/auth records do not
mutate local trust or resource state.
- `[ ]` Tests assert conflicting replicated keychain/auth records do not
- `[x]` Tests assert conflicting replicated keychain/auth records do not
mutate local trust or resource state.
- `[~]` Remote authorization enforcement audit.