#!/usr/bin/env python3 # SPDX-License-Identifier: GPL-3.0-or-later """Phase-1.0CG native WSL design guardrails.""" import argparse import hashlib import json from pathlib import Path import unittest parser = argparse.ArgumentParser() parser.add_argument("--root", type=Path, required=True) root = parser.parse_args().root class Phase10CGGuardrails(unittest.TestCase): @classmethod def setUpClass(cls) -> None: cls.data = json.loads((root / "manifests/retroarch/phase-1.0cg-native-wsl-sdl-materializer-design-gate.json").read_text(encoding="utf-8")) def test_parent_and_native_root_are_bound(self) -> None: parent = root / "manifests/retroarch/phase-1.0cf-repeated-configure-timeout-and-cleanup-gate.json" self.assertEqual(hashlib.sha256(parent.read_bytes()).hexdigest(), self.data["source_bindings"]["phase10cf_manifest_sha256"]) observation = self.data["native_root_observation"] self.assertEqual(observation["path"], "/tmp/chimera-gfx-phase10ch") self.assertEqual(observation["parent_filesystem"], "tmpfs") self.assertTrue(observation["root_absent"]) def test_design_has_no_export_or_target(self) -> None: design = self.data["design_contract"] for key in ("native_stage", "native_build", "native_archive"): self.assertTrue(design[key].startswith( "/tmp/chimera-gfx-phase10ch/"), key) self.assertFalse(design["archive_export_included"]) self.assertFalse(design["retroarch_build_included"]) self.assertFalse(design["device_action_included"]) def test_only_design_and_fake_tests_are_open(self) -> None: auth = self.data["authorizations"] self.assertTrue(auth["native_wsl_source_design_authorized"]) self.assertTrue(auth["fake_host_tests_authorized"]) for key, value in auth.items(): if key not in ("native_wsl_source_design_authorized", "fake_host_tests_authorized"): self.assertFalse(value, key) if __name__ == "__main__": unittest.main(argv=[__file__])