chio-kernel 0.1.0

Chio runtime kernel: capability validation, guard evaluation, receipt signing
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

// Phase 19.1 roadmap acceptance tests for the compliance scoring model.
//
// Included by `src/kernel/tests.rs`, which already pulled in `super::*`
// and helpers from `tests/all.rs`. We only need items that are not in
// scope yet.
//
// Acceptance criteria (roadmap 19.1):
//   * zero denies in 1000 calls -> score > 900
//   * revoked capability        -> score < 500

use crate::compliance_score::{
    compliance_score, ComplianceScoreConfig, ComplianceScoreInputs,
};
use crate::evidence_export::{EvidenceChildReceiptScope, EvidenceExportQuery};
use crate::operator_report::ComplianceReport;

fn clean_report() -> ComplianceReport {
    ComplianceReport {
        matching_receipts: 1000,
        evidence_ready_receipts: 1000,
        uncheckpointed_receipts: 0,
        checkpoint_coverage_rate: Some(1.0),
        lineage_covered_receipts: 1000,
        lineage_gap_receipts: 0,
        lineage_coverage_rate: Some(1.0),
        pending_settlement_receipts: 0,
        failed_settlement_receipts: 0,
        direct_evidence_export_supported: true,
        child_receipt_scope: EvidenceChildReceiptScope::FullQueryWindow,
        proofs_complete: true,
        export_query: EvidenceExportQuery::default(),
        export_scope_note: None,
    }
}

#[test]
fn phase_19_1_zero_denies_in_1000_calls_scores_above_900() {
    let report = clean_report();
    let inputs = ComplianceScoreInputs::new(1000, 0, 1, 0, 1000, 0, Some(0));
    let score = compliance_score(
        &report,
        &inputs,
        &ComplianceScoreConfig::default(),
        "agent-clean",
        1,
    );

    assert!(
        score.score > 900,
        "zero denies in 1000 calls must score >900 (got {})",
        score.score
    );
    assert_eq!(score.agent_id, "agent-clean");
    assert_eq!(score.factor_breakdown.deny_rate.deduction, 0);
}

#[test]
fn phase_19_1_revoked_capability_scores_below_500() {
    let report = clean_report();
    // One observed capability, fully revoked. any_revoked forces the
    // revocation factor to max.
    let mut inputs = ComplianceScoreInputs::new(1000, 0, 1, 1, 1000, 0, Some(0));
    inputs.any_revoked = true;
    let score = compliance_score(
        &report,
        &inputs,
        &ComplianceScoreConfig::default(),
        "agent-revoked",
        1,
    );

    assert!(
        score.score < 500,
        "revoked capability must score <500 (got {})",
        score.score
    );
    assert_eq!(
        score.factor_breakdown.revocation.points, 0,
        "revocation factor should be fully deducted"
    );
}

#[test]
fn phase_19_1_breakdown_surfaces_per_factor_details() {
    let report = clean_report();
    let inputs = ComplianceScoreInputs::new(1000, 100, 5, 0, 500, 50, Some(1_000));
    let score = compliance_score(
        &report,
        &inputs,
        &ComplianceScoreConfig::default(),
        "agent-mixed",
        1,
    );

    // Per-factor fields exist and deductions match their rates.
    assert!(score.factor_breakdown.deny_rate.deduction > 0);
    assert!(score.factor_breakdown.velocity_anomaly.deduction > 0);
    assert_eq!(score.factor_breakdown.revocation.deduction, 0);
    assert!(score.score <= crate::compliance_score::COMPLIANCE_SCORE_MAX);
}