base-layer/configkit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Share secret traversal between resolution and validation

Browse Source
This commit is contained in:
Eric Rakestraw
2026-11-01 18:23:50 +00:00
parent b3bb57eda0
commit 08bb3a20c6
4 changed files with 252 additions and 108 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
docs/roadmap/equivalence.md
View File

@@ -9,6 +9,17 @@ or a requirement to refactor before release.
## 1. Share typed-secret slot traversal between resolution and mutation auditing
**Status:** Complete. [secret_walk.go](../../internal/engine/secret_walk.go)
now owns traversal for both operations, with explicit writable and read-only map
handling. Resolution and mutation auditing retain separate leaf operations and
lifecycle passes. The [container regression](../../internal/engine/secret_walk_test.go)
checks resolved state, mutation paths, nil containers, and lookup counts through
both passes without deriving expectations from the walker.
Completion validation: the new container cases passed before and after the
refactor. Focused secret/validation tests, `go test -race ./... -count=1`, and
`./scripts/check.sh` passed.
### Evidence
The tests in [secret_reference_test.go](../../internal/engine/secret_reference_test.go)