test(qa): add contention and secret-detection coverage with CI gates#34
Closed
test(qa): add contention and secret-detection coverage with CI gates#34
Conversation
Add multi-agent contention simulation tests (same-file claim race, port double-claim, steal-against-fresh-holder, heavy concurrent weave append) and secret-detection corpus tests (6 fixture specimens covering all 7 default private patterns plus clean control). Wire both into PR, nightly, and release CI workflows. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Add content_scan_exempt_globs to classifier policy and set tests/fixtures/secrets/** as exempt. Prevents the PR public-private guard from self-blocking on the intentional secret specimens added in the previous commit. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Locks the exemption behavior: a file with secret content under an exempt glob is classified PUBLIC, not PRIVATE. Prevents the guard fix from regressing silently. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
7 tasks
There was a problem hiding this comment.
Pull request overview
This PR adds QA test coverage for multi-agent contention scenarios and secret-detection classification, along with a content_scan_exempt_globs policy option to prevent test fixture files from triggering the public-private content scanner. Three CI workflow files are added to run these tests on PRs, nightly, and releases.
Changes:
- New contention tests (claim races, steal guards, concurrent weave append) and secret-detection regression tests
content_scan_exempt_globspolicy support inclassify_path()to skip content scanning for matching paths- Three new GitHub Actions workflows for PR gates, nightly simulations, and release checks
Reviewed changes
Copilot reviewed 14 out of 14 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
tests/test_contention.py |
Multi-agent contention simulation tests |
tests/test_secret_detection.py |
Parameterized secret-detection regression tests |
tests/test_public_private.py |
Regression test for content_scan_exempt_globs |
src/agentmesh/public_private.py |
Adds content_scan_exempt_globs policy support |
.agentmesh/policy.json |
Exempts test fixture secrets from content scanning |
tests/fixtures/secrets/* |
6 fixture files for secret-detection tests |
.github/workflows/*.yml |
3 CI workflow files |
You can also share your feedback on Copilot code review. Take the survey.
9 tasks
Owner
Author
|
Superseded by #35 — adds Signed-off-by trailers and widens classifier exemption to cover inline-pattern test files. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
content_scan_exempt_globsto classifier policy so synthetic test fixtures don't self-block the PR public-private guardSplit from #33 to isolate QA work from the proof-posture bridge feature.
Commits
73329e8test_contention.py,test_secret_detection.py, 6 fixture files, 3 workflow YAMLs762fd24content_scan_exempt_globsinpublic_private.py+policy.json9b23ec7Test plan
🤖 Generated with Claude Code