✔ direct publisher graph is signed evidence, never resource permission (15.712834ms)
✔ delegated publisher graph is signed evidence, never resource permission (2.540833ms)
✔ cross-origin graph requires separately observed authority for every ancestor (3.392916ms)
✔ bundle keys cannot create historical pins (0.834292ms)
✔ reject missing document (4.708083ms)
✔ reject duplicate document (0.835875ms)
✔ reject duplicate signed payload (0.539458ms)
✔ reject duplicate logical root with changed member order (0.343667ms)
✔ reject wrong root asset (1.008041ms)
✔ reject wrong root version (1.489667ms)
✔ reject wrong representation (1.070834ms)
✔ reject wrong payload digest (1.05575ms)
✔ reject different immutable pin (0.372375ms)
✔ reject invalid independent pin bytes (0.266833ms)
✔ reject extra bundle field (0.246917ms)
✔ reject legacy bundle (0.235958ms)
✔ reject empty roots (0.250708ms)
✔ reject excess manifests (0.618666ms)
✔ reject correctly signed wrong endpoint (0.471833ms)
✔ reject correctly signed wrong issuer (0.852458ms)
✔ reject correctly signed unknown service (1.102375ms)
✔ reject correctly signed no delegated authority (0.957667ms)
✔ reject correctly signed outside asset scope (1.1ms)
✔ reject correctly signed publication duration (0.4855ms)
✔ reject correctly signed publication payment (0.419458ms)
✔ reject correctly signed publication wrong key role (0.425209ms)
✔ reject correctly signed publication outside resource (0.923083ms)
✔ reject correctly signed future publication (0.473625ms)
✔ reject correctly signed wrong authority revision (0.434375ms)
✔ reject correctly signed unknown manifest field (0.647625ms)
✔ reject correctly signed negative size (0.435083ms)
✔ reject correctly signed duplicate representation (0.490958ms)
✔ reject correctly signed invalid language (0.454917ms)
✔ reject correctly signed uppercase charset (0.433417ms)
✔ reject correctly signed self derivation (0.552333ms)
✔ signature tampering fails despite structurally valid payload (1.355042ms)
✔ exact signed bytes, not reserialized values, determine manifest digest (2.088208ms)
✔ retired and expired current authority preserve historical evidence, without current publication (2.647125ms)
✔ remembered compromised material rejects evidence after key removal or alias (1.16175ms)
✔ rebound key identity and service issuer are rejected (1.663458ms)
✔ current freshness and trusted history are checked again at the end (3.129375ms)
✔ complete derivation closure rejects missing, extra and substituted parents (4.15525ms)
✔ copy requires exact decoded bytes and metadata; transform remains only a claim (2.694541ms)
✔ future source and duplicate logical edges cannot be hidden in signatures (1.768792ms)
✔ eight levels accepted; ninth rejected, including a shared deep branch (12.162958ms)
✔ immutable version cannot be redefined by a second authorised signature (0.505916ms)
✔ all published representation edges are closed even if root selects another representation (0.988625ms)
✔ prohibited retrieval does not become access through an authorised publication (0.988042ms)
✔ full decoded and gzip bytes match locally but do not prove receipt, use, or derivation computation (2.05975ms)
✔ unknown encoded variant stays unknown while decoded bytes match (1.029959ms)
✔ malformed lexical JSON, including floats and duplicate members, is rejected (0.235166ms)
ℹ tests 51
ℹ suites 0
ℹ pass 51
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 152.061125