Skip to content

build(deps-dev): bump agentrust-trace-tests from 0.5.0 to 0.5.1 in /integrations/ramen-ai-cmcp #152

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
imran-siddique merged 3 commits into from
Sep 1, 2026
Merged

build(deps-dev): bump agentrust-trace-tests from 0.5.0 to 0.5.1 in /integrations/ramen-ai-cmcp #152

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
992fc33
build(deps-dev): bump agentrust-trace-tests
dependabot[bot] Sep 1, 2026
50ad2c0
test(ramen-ai-cmcp): expect TR-RTE-004 at Level 1
imransiddique-ai Sep 1, 2026
f956a2a
Merge remote-tracking branch 'origin/main' into dep152b
imransiddique-ai Sep 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion integrations/ramen-ai-cmcp/pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ dependencies = [

[project.optional-dependencies]
test = [
"agentrust-trace-tests==0.5.0",
"agentrust-trace-tests==0.5.1",
"pytest==9.1.1",
]

Expand Down
18 changes: 16 additions & 2 deletions integrations/ramen-ai-cmcp/tests/test_mapping.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -253,7 +253,16 @@ def test_signed_software_record_passes_level_0(self, trace_key):
finding.status for finding in findings if finding.code == "TR-SIG-005"
] == [Status.PASS]

def test_signed_software_record_fails_only_level_1_runtime_rule(self, trace_key):
def test_signed_software_record_fails_level_1_runtime_rules(self, trace_key):
"""A software-only record fails Level 1 on runtime rules only.

Two of them as of agentrust-trace-tests 0.5.1. TR-RTE-001 is the platform
rule and has always fired here. TR-RTE-004 was added in 0.5.1 and fires
because no verifier nonce is supplied: this harness does not issue one, and
the record carries no ``runtime.nonce`` to match it if it did. The assertion
stays an exact comparison on purpose, so that a future change to the Level 1
finding set fails this test rather than passing silently.
"""
record = _build(_load("vector1_allowed.json"), iat=int(time.time()))
results = run_trace_tests(record, "trace", level=1)
failures = [
Expand All @@ -268,5 +277,10 @@ def test_signed_software_record_fails_only_level_1_runtime_rule(self, trace_key)
"TR-RTE-001: runtime.platform 'software-only' is development-mode "
"and not acceptable for hardware-attested levels (Level 1 requires "
"a hardware TEE platform)",
)
),
(
"TR-RTE-004",
"TR-RTE-004: Level 1+ verification requires the verifier's "
"expected nonce",
),
]
Loading