✔ identity rejects PID reuse, command changes, opaque timestamps (1.428999ms)
✔ ownership excludes unrelated siblings and pre-parent timestamp PID artifacts (1.167004ms)
✔ renderer app path is an exact Windows path, not a substring (0.573903ms)
✔ actual Local URL parses ANSI and variable ports without accepting remote hosts (0.377024ms)
✔ HTTP requires exact source and real transformed JS, not generic 200 HTML (6.388623ms)
✔ health requires correct port ownership, target renderer, responsive owned main (6.090154ms)
✔ non-Windows native dev is explicitly unsupported, never GUI PASS (0.903487ms)
✔ renderer attestation requires fresh UUID-bound visible UI and exact process IDs (0.616465ms)
✔ producer opt-in gates packaged, missing and invalid run IDs without timers or writes (6.708382ms)
✔ producer writes fresh run and native PID proof only for a complete visible shell with button (14.703835ms)
✔ loading, rejected renderer and linked output directory cannot produce ready proof (4.14652ms)
✔ invalidation while a true proof write is pending cannot leave a stale true result (2.538499ms)
✔ unresponsive and closed windows invalidate proof; close cancels periodic probes (3.467302ms)
✔ strict parser accepts only fixed action and bounded flags (1.665876ms)
✔ shell metacharacters remain literal argv, not commands (86.126075ms)
✔ explicit root never silently picks parent or another repository (38.502242ms)
✔ dirty checkout blocks pull without discarding changes (44.167862ms)
✔ pull refuses wrong branch and remote before network access (61.812683ms)
✔ workspace lock excludes concurrent mutations and preserves unknown lock (48.40442ms)
✔ timeout is bounded and records actual timeout (56.057511ms)
✔ artifact freshness rejects stale outputs and accepts rewritten identical bytes (38.828005ms)
✔ logs redact credentials and JSON errors are machine-readable (117.029628ms)
✔ package never invokes installer on unsupported platforms (41.293196ms)
✔ fresh local fetch fast-forwards exactly; ahead/divergent and fetch failure preserve checkout (3785.777542ms)
✔ source fingerprint notices content changes even when HEAD and dirty boolean do not change (64.664435ms)
✔ redaction preserves JSON syntax for embedded token error text (0.562847ms)
✔ dev-latest is unsupported before any Git mutation on non-Windows (61.207156ms)
✔ oversized evidence is bounded for small-model JSON consumption (1.9262ms)
ℹ tests 28
ℹ suites 0
ℹ pass 28
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 4598.969052