Status: QA handoff matrix for implementation sprint (2026-02-10).
| ID | Layer | Scenario | Expected result |
|---|
| PAP-T01 | Unit | Manifest canonicalization stable for nested objects/unicode | PASS |
| PAP-T02 | Unit | Manifest missing required field | ERR_MANIFEST_SCHEMA |
| PAP-T03 | Unit | Manifest signature mismatch | ERR_MANIFEST_SIGNATURE |
| PAP-T04 | Unit | DSSE payload digest mismatch | ERR_DSSE_PAYLOAD_DIGEST |
| PAP-T05 | Unit | File digest mismatch for required file | ERR_FILE_DIGEST_MISMATCH |
| PAP-T05A | Unit | Compliance control references evidence without checksum inventory coverage | control_evidence_checksum_missing |
| PAP-T06 | Integration | Rekor tile corruption | ERR_REKOR_TILE_DIGEST_MISMATCH |
| PAP-T07 | Integration | Rekor proof node corruption | ERR_REKOR_PROOF_INVALID |
| PAP-T08 | Integration | Checkpoint signature corruption | ERR_REKOR_CHECKPOINT_INVALID |
| PAP-T09 | Integration | Root hash mismatch | ERR_REKOR_ROOT_MISMATCH |
| PAP-T10 | Integration | Required Rekor material missing | ERR_REKOR_TILE_MISSING |
| PAP-T11 | E2E | Full offline verification with valid pack | PASS |
| PAP-T12 | E2E | Repeat generation from frozen input twice | identical SHA-256 output |
| PAP-T13 | E2E | Optional Parquet absent | PASS |
| PAP-T14 | E2E | Optional Parquet present with invalid fingerprint | ERR_PARQUET_FINGERPRINT_MISMATCH |
| PAP-T15 | Integration | Full offline verification of compliance-mapped pack containing artifact, SBOM, provenance, attestation, and control evidence | PASS |
| PAP-T16 | Integration | Compliance control evidence file is modified after pack generation | checksum_mismatch |
| PAP-T17 | Integration | Rekor proof reference is present but not covered by the checksum inventory | rekor_proof_checksum_missing |
| PAP-T18 | Integration | Rekor proof reference is covered by the checksum inventory | PASS |
| PAP-T19 | Integration | Attestation reference digest disagrees with checksum inventory | attestation_checksum_mismatch |
- Golden fixtures under
testvectors/portable-audit-pack/. - Expected digests tracked in fixture metadata and CI assertions.
- All fixtures must be network-independent and deterministic.
| Date (UTC) | Fixture set | Command | Result | Owner |
|---|
| 2026-02-10 | Planning only | Matrix drafted for implementation sprint handoff. | N/A | QA/Test Automation |
| 2026-05-16 | Compliance-mapped release evidence pack | powershell -ExecutionPolicy Bypass -File .\scripts\test-targeted-xunit.ps1 -Project src/Attestor/__Tests/StellaOps.Attestor.EvidencePack.IntegrationTests/StellaOps.Attestor.EvidencePack.IntegrationTests.csproj -Class StellaOps.Attestor.EvidencePack.IntegrationTests.EvidencePackOfflineVerifierTests | PASS: 3/3 targeted tests. | R6 |
| 2026-05-16 | Manifest reference/Rekor proof fail-closed coverage | dotnet build src\Attestor\__Tests\StellaOps.Attestor.EvidencePack.IntegrationTests\StellaOps.Attestor.EvidencePack.IntegrationTests.csproj -v minimal; powershell -ExecutionPolicy Bypass -File .\scripts\test-targeted-xunit.ps1 -Project src\Attestor\__Tests\StellaOps.Attestor.EvidencePack.IntegrationTests\StellaOps.Attestor.EvidencePack.IntegrationTests.csproj -Class StellaOps.Attestor.EvidencePack.IntegrationTests.EvidencePackOfflineVerifierTests -SkipBuild | PASS: 9/9 targeted tests. | Codex |
