envseal 0.3.10

Write-only secret vault with process-level access control — post-agent secret management
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
//! Invariant: BinaryTampered display includes path and both hashes.
use envseal::error::Error;

#[test]
fn binary_tampered_display() {
    let err = Error::BinaryTampered {
        binary_path: "/usr/bin/node".to_string(),
        expected_hash: "aaaa".to_string(),
        actual_hash: "bbbb".to_string(),
    };
    let msg = err.to_string();
    assert!(msg.contains("/usr/bin/node"));
    assert!(msg.contains("aaaa"));
    assert!(msg.contains("bbbb"));
    assert!(msg.contains("tampered"));
}