Skip to content

test(remote): golden .dig fixture + rpc.dig.net read proof (#843) - #32

Merged
MichaelTaylor3d merged 3 commits into
mainfrom
feat/golden-fixture-read-proof-843
Jul 21, 2026
Merged

test(remote): golden .dig fixture + rpc.dig.net read proof (#843)#32
MichaelTaylor3d merged 3 commits into
mainfrom
feat/golden-fixture-read-proof-843

Conversation

@MichaelTaylor3d

Copy link
Copy Markdown
Contributor

Implements the READ-leg golden fixture + rpc-tier read proof (super-repo #843). Shared acceptance input for #843 (rpc read proof) + #1062 (P2P e2e).

Plan

  • Deterministic golden fixture (fixed store_id + resource + plaintext -> byte-stable ciphertext/inclusion-proof/root via the single-source crypto in digstore_core) committed under crates/digstore-remote/tests/fixtures/golden.
  • §5.1 decode round-trip test: golden decrypts byte-identically + merkle proof verifies against the documented root (anti-regression anchor; carries store_id+root for #1431 verify_pinned_root + per-range merkle).
  • rpc-tier read test via DigClient::get_content against rpc.dig.net -> verify-then-decrypt -> byte-compare golden plaintext. Gated behind DIG_RPC_LIVE (no live golden store yet; un-ignore on publish).
  • STUB local-tier/rootless leg (connect-lane dig-node #1439/#747/#852).

Blast radius: additive test + fixtures only; no production symbols edited. WIP.

MichaelTaylor3d and others added 2 commits July 21, 2026 15:19
Add the READ-leg golden fixture + verify-then-decrypt read proof — the shared
acceptance input for the single-node established read bar (#843 rpc-tier proof
and #1062 P2P e2e). One committed golden under
crates/digstore-remote/tests/fixtures/golden (plaintext + ciphertext +
inclusion_proof + manifest), derived deterministically from the single-source
read-crypto in digstore_core so it is byte-stable forever (the §5.1 anchor).

Tests: golden byte-stability (§5.1 regression anchor), manifest identity match,
the full verify-then-decrypt gate over the committed bytes, a tamper-fails-gate
negative, and the rpc.dig.net read proof via DigClient::get_content (gated on
DIG_RPC_LIVE until a store is published under the golden id). Local-tier /
rootless-resolve leg left as a documented stub pending connect-lane dig-node
#1439/#747/#852.

Version bump 0.19.0 -> 0.19.1 (patch: additive test + fixtures, no behaviour
change).

Co-Authored-By: Claude <noreply@anthropic.com>
@MichaelTaylor3d
MichaelTaylor3d marked this pull request as ready for review July 21, 2026 22:30
…ws CI

The plaintext.bin §5.1 anchor is text-like, so git normalized LF->CRLF on the
Windows CI checkout, breaking the byte-stability + verify-then-decrypt assertions
(ubuntu green, windows red). Add a fixtures .gitattributes marking every golden
file '-text' so checkout is byte-identical on all platforms.

Co-Authored-By: Claude <noreply@anthropic.com>
@MichaelTaylor3d
MichaelTaylor3d merged commit 649b5f7 into main Jul 21, 2026
10 checks passed
@MichaelTaylor3d
MichaelTaylor3d deleted the feat/golden-fixture-read-proof-843 branch July 21, 2026 23:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant