envseal 0.3.3

Write-only secret vault with process-level access control — post-agent secret management
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13

//! Invariant: decrypting a nonexistent secret returns SecretNotFound.
use crate::common;
use envseal::error::Error;

#[test]
fn decrypt_nonexistent() {
    let (_dir, vault) = common::temp_vault();
    let err = vault.decrypt("nope").unwrap_err();
    assert!(
        matches!(err, Error::SecretNotFound(ref name) if name == "nope"),
        "Fix: decrypt of nonexistent secret must return SecretNotFound, got {err:?}"
    );
}