envseal 0.3.13

Write-only secret vault with process-level access control — post-agent secret management
1
2
3
4
5
6
7
8
9

//! Invariant: resolve_binary returns BinaryResolution error for nonexistent commands.
use envseal::error::Error;
use envseal::policy::resolve_binary;

#[test]
fn resolve_binary_rejects_nonexistent() {
    let err = resolve_binary("definitely-not-a-real-binary-xyz").unwrap_err();
    assert!(matches!(err, Error::BinaryResolution(_)));
}