flavorpack 2026-03-30
Enterprise security foundation, 99%+ Python coverage, Windows admin check
170 files · 17,128+ · 3,076-

Enterprise security foundation: SBOM, policy, trust CLI

instantiate behavioral
3 files changed
  • security.py Security utilities: policy hash, key fingerprint, SBOM digest
  • security.py Security command group: SBOM/provenance/policy/trust CLI testing
  • enterprise-security-reference.md Enterprise security reference: policy, trust, SBOM, attestation
  • Enterprise security foundation merged: SBOM/provenance inspection, canonical JSON policy hash, key fingerprint verification, SBOM digest comparison, and trust anchor management. Security CLI command group added for interactive testing. E2E integration tests verify policy hash, key fingerprint, SBOM digest, and CLI command behavior. instantiate behavioral
    2 files
    • security.py
    • security.py

Windows/Linux admin check implementation

harden behavioral
2 files changed
  • admin_check.rs Windows admin check implemented in Rust; TODO stubs removed
  • admin.go Platform-aware admin check for refuse_root policy enforcement
  • Windows admin check implemented in Rust (was a TODO stub). Go launcher gains platform-aware admin check for refuse_root policy enforcement on Windows, Linux, and macOS. harden behavioral
    2 files
    • admin_check.rs
    • admin.go

99%+ Python coverage with 394 coverage-gap tests

qualify internal
2 files changed
  • test_format_2025_coverage.py 104 coverage-gap tests for format_2025 core modules
  • test_coverage_gap_sweep.py 290 coverage-gap tests for packaging, commands, config, helpers
  • Final coverage sweep achieves >99% Python coverage. 394 tests added: 104 for format_2025 core (all modules at 100%), 290 for packaging, commands, config, and helper modules. Go and Rust trust/policy fixes included: canonical JSON policy hash, inline TOML comments, allow_platforms support, and OID validation in Rust trust module. qualify internal
    2 files
    • test_format_2025_coverage.py
    • test_coverage_gap_sweep.py
← 2026-03-29 flavorpack changelog → 2026-03-31 flavorpack →