213 lines
11 KiB
Python
213 lines
11 KiB
Python
#!/usr/bin/env python3
|
|
import hashlib
|
|
import json
|
|
import os
|
|
import shutil
|
|
import subprocess
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parent.parent
|
|
SCRIPT = ROOT / "scripts" / "render_world_class_operator_runbook.py"
|
|
CLI = ROOT / "scripts" / "yao.py"
|
|
TMP = ROOT / "tests" / "tmp_world_class_operator_runbook"
|
|
|
|
|
|
def sha256_file(path: Path) -> str:
|
|
digest = hashlib.sha256()
|
|
with path.open("rb") as handle:
|
|
for chunk in iter(lambda: handle.read(1024 * 1024), b""):
|
|
digest.update(chunk)
|
|
return digest.hexdigest()
|
|
|
|
|
|
def provider_submission() -> dict:
|
|
return {
|
|
"schema_version": "1.0",
|
|
"evidence_key": "provider-holdout",
|
|
"template_only": False,
|
|
"category": "external",
|
|
"source_type": "provider-output-eval",
|
|
"submitted_by": "Yao provider operator",
|
|
"submitted_at": "2026-06-14",
|
|
"summary": "Aggregate provider-backed holdout evidence for ledger review.",
|
|
"artifact_refs": [
|
|
{
|
|
"path": "reports/output_execution_runs.json",
|
|
"kind": "aggregate-report",
|
|
"contains_raw_content": False,
|
|
"sha256": sha256_file(ROOT / "reports" / "output_execution_runs.json"),
|
|
}
|
|
],
|
|
"provenance": {"provider": "openai", "model": "gpt-4.1-mini", "credential_material_committed": False},
|
|
"privacy": {
|
|
"raw_user_content_included": False,
|
|
"raw_provider_prompt_included": False,
|
|
"credentials_included": False,
|
|
"secrets_included": False,
|
|
},
|
|
"anti_overclaim": {
|
|
"planned_work_counts_as_evidence": False,
|
|
"metadata_fallback_counts_as_native_enforcement": False,
|
|
"pending_review_counts_as_human_decision": False,
|
|
"local_command_runner_counts_as_provider_model": False,
|
|
},
|
|
"attestation": {
|
|
"real_external_or_human_evidence": True,
|
|
"reviewer_or_operator_identity_present": True,
|
|
"artifact_refs_reviewed": True,
|
|
"privacy_contract_satisfied": True,
|
|
},
|
|
}
|
|
|
|
|
|
def run_direct(*extra: str) -> dict:
|
|
proc = subprocess.run(
|
|
[sys.executable, str(SCRIPT), str(ROOT), "--generated-at", "2026-06-14", *extra],
|
|
cwd=ROOT,
|
|
capture_output=True,
|
|
text=True,
|
|
check=True,
|
|
)
|
|
return json.loads(proc.stdout)
|
|
|
|
|
|
def run_cli(*extra: str) -> dict:
|
|
env = dict(os.environ)
|
|
env["YAO_CLI_TELEMETRY"] = "0"
|
|
env.pop("YAO_CLI_TELEMETRY_EVENTS", None)
|
|
proc = subprocess.run(
|
|
[sys.executable, str(CLI), *extra],
|
|
cwd=ROOT,
|
|
capture_output=True,
|
|
text=True,
|
|
env=env,
|
|
check=True,
|
|
)
|
|
return json.loads(proc.stdout)
|
|
|
|
|
|
def main() -> None:
|
|
shutil.rmtree(TMP, ignore_errors=True)
|
|
TMP.mkdir(parents=True, exist_ok=True)
|
|
output_json = TMP / "world_class_operator_runbook.json"
|
|
output_md = TMP / "world_class_operator_runbook.md"
|
|
output_html = TMP / "world_class_operator_runbook.html"
|
|
payload = run_direct("--output-json", str(output_json), "--output-md", str(output_md), "--output-html", str(output_html))
|
|
assert payload["schema_version"] == "1.0", payload
|
|
assert payload["ok"] is True, payload
|
|
summary = payload["summary"]
|
|
assert summary["decision"] == "collect-evidence", summary
|
|
assert summary["evidence_item_count"] == 4, summary
|
|
assert summary["pending_count"] == 4, summary
|
|
assert summary["awaiting_submission_count"] == 4, summary
|
|
assert summary["ready_for_ledger_review_count"] == 0, summary
|
|
assert summary["valid_packet_source_incomplete_count"] == 0, summary
|
|
assert summary["invalid_submission_count"] == 0, summary
|
|
assert summary["source_check_count"] >= 13, summary
|
|
assert summary["source_pass_count"] + summary["source_blocked_count"] == summary["source_check_count"], summary
|
|
assert summary["source_blocked_count"] >= 6, summary
|
|
assert summary["ready_to_claim_world_class"] is False, summary
|
|
assert summary["runbook_counts_as_completion"] is False, summary
|
|
items = {item["evidence_key"]: item for item in payload["items"]}
|
|
assert set(items) == {
|
|
"provider-holdout",
|
|
"human-adjudication",
|
|
"native-permission-enforcement",
|
|
"native-client-telemetry",
|
|
}, items
|
|
provider = items["provider-holdout"]
|
|
assert provider["review_state"] == "awaiting-submission", provider
|
|
assert provider["source_accepted"] is False, provider
|
|
assert provider["blocked_source_check_count"] == 2, provider
|
|
assert any("output-exec --provider-runner openai" in step for step in provider["execution_runbook"]), provider
|
|
assert "Run provider-backed output-exec with real credentials." in provider["next_source_actions"], provider
|
|
assert "Provider execution should return non-estimated token usage." in provider["next_source_actions"], provider
|
|
assert provider["commands"]["prepare_submission"].startswith("python3 scripts/yao.py world-class-submission-kit"), provider
|
|
assert "world-class-intake" in provider["commands"]["validate_intake"], provider
|
|
assert "world-class-submission-review" in provider["commands"]["review_queue"], provider
|
|
assert "world-class-ledger" in provider["commands"]["refresh_ledger"], provider
|
|
assert "world-class-claim-guard" in provider["commands"]["guard_claim"], provider
|
|
assert "provider-backed model run" in provider["must_collect"]["provenance_requirements"], provider
|
|
assert "reports/output_execution_runs.json summary.model_executed_count > 0" in provider["must_collect"]["success_checks"], provider
|
|
provider_source = {item["field"]: item for item in provider["source_checklist"]}
|
|
assert provider_source["model_executed_count"]["status"] == "blocked", provider_source
|
|
assert provider_source["timing_observed_count"]["status"] == "pass", provider_source
|
|
assert provider_source["token_observed_count"]["status"] == "blocked", provider_source
|
|
markdown = output_md.read_text(encoding="utf-8")
|
|
assert "World-Class Operator Runbook" in markdown, markdown
|
|
assert "runbook counts as completion: `false`" in markdown, markdown
|
|
assert "Valid intake means ready for submission review; ledger review still requires passing source evidence." in markdown, markdown
|
|
assert "| Evidence | Ledger | Intake | Review | Blocked checks | Next source action | Owner |" in markdown, markdown
|
|
assert "| `provider-holdout` | `pending` | `awaiting-submission` | `awaiting-submission` | `2` | Run provider-backed output-exec with real credentials." in markdown, markdown
|
|
assert "Source Runbook" in markdown, markdown
|
|
assert "output-exec --provider-runner openai" in markdown, markdown
|
|
assert "### Next Source Actions" in markdown, markdown
|
|
assert "- Provider execution should return non-estimated token usage." in markdown, markdown
|
|
assert "Source Evidence Snapshot" in markdown, markdown
|
|
assert "| Check | Current | Expected | Status | Next action |" in markdown, markdown
|
|
assert "| Provider model run | `0` | `>0` | `blocked` | Run provider-backed output-exec with real credentials. |" in markdown, markdown
|
|
html = output_html.read_text(encoding="utf-8")
|
|
assert "World-Class Operator Runbook" in html, html[:400]
|
|
assert "ledger and claim guard" in html, html
|
|
assert "position:sticky" in html, html
|
|
assert "<span>Ready</span><strong>0</strong>" in html, html
|
|
assert "<span>Invalid</span><strong>0</strong>" in html, html
|
|
assert f"<span>Blocked</span><strong>{summary['source_blocked_count']}</strong>" in html, html
|
|
assert "<dt>Blocked</dt><dd><code>2</code></dd>" in html, html
|
|
assert "Next Source Actions" in html, html
|
|
assert "Source Runbook" in html, html
|
|
assert "output-exec --provider-runner openai" in html, html
|
|
assert "Source Evidence Snapshot" in html, html
|
|
assert "model_executed_count" in html, html
|
|
assert "model_executed_count: 0 / >0" in html, html
|
|
assert "raw_content_allowed: False / false" in html, html
|
|
assert "<script" not in html.lower(), html
|
|
assert "http://" not in html and "https://" not in html, html
|
|
|
|
cli_payload = run_cli(
|
|
"world-class-runbook",
|
|
str(ROOT),
|
|
"--output-json", str(TMP / "cli_runbook.json"),
|
|
"--output-md", str(TMP / "cli_runbook.md"),
|
|
"--output-html", str(TMP / "cli_runbook.html"),
|
|
"--generated-at", "2026-06-14",
|
|
)
|
|
assert cli_payload["summary"]["decision"] == "collect-evidence", cli_payload
|
|
assert cli_payload["artifacts"]["html"].endswith("tests/tmp_world_class_operator_runbook/cli_runbook.html"), cli_payload
|
|
|
|
submissions = TMP / "valid_submissions"
|
|
submissions.mkdir()
|
|
(submissions / "provider-holdout.json").write_text(
|
|
json.dumps(provider_submission(), ensure_ascii=False, indent=2) + "\n",
|
|
encoding="utf-8",
|
|
)
|
|
submitted = run_direct(
|
|
"--submissions-dir", str(submissions),
|
|
"--output-json", str(TMP / "submitted_runbook.json"),
|
|
"--output-md", str(TMP / "submitted_runbook.md"),
|
|
"--output-html", str(TMP / "submitted_runbook.html"),
|
|
)
|
|
submitted_summary = submitted["summary"]
|
|
assert submitted_summary["awaiting_submission_count"] == 3, submitted_summary
|
|
assert submitted_summary["valid_packet_source_incomplete_count"] == 1, submitted_summary
|
|
assert submitted_summary["ready_for_ledger_review_count"] == 0, submitted_summary
|
|
assert submitted_summary["source_pass_count"] + submitted_summary["source_blocked_count"] == submitted_summary["source_check_count"], submitted_summary
|
|
assert submitted_summary["source_blocked_count"] >= 6, submitted_summary
|
|
assert submitted_summary["ready_to_claim_world_class"] is False, submitted_summary
|
|
submitted_provider = {item["evidence_key"]: item for item in submitted["items"]}["provider-holdout"]
|
|
assert submitted_provider["intake_readiness"] == "source-evidence-incomplete", submitted_provider
|
|
assert submitted_provider["review_state"] == "source-evidence-incomplete", submitted_provider
|
|
assert submitted_provider["source_accepted"] is False, submitted_provider
|
|
assert submitted_provider["blocked_source_check_count"] == 2, submitted_provider
|
|
assert submitted_provider["next_source_actions"] == provider["next_source_actions"], submitted_provider
|
|
assert "tests/tmp_world_class_operator_runbook/valid_submissions" in submitted_provider["commands"]["validate_intake"], submitted_provider
|
|
assert "tests/tmp_world_class_operator_runbook/valid_submissions" in submitted_provider["commands"]["review_queue"], submitted_provider
|
|
assert "tests/tmp_world_class_operator_runbook/valid_submissions" in submitted_provider["commands"]["refresh_ledger"], submitted_provider
|
|
print(json.dumps({"ok": True}, ensure_ascii=False, indent=2))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|