From 38f47fb5857844a254bb5f2a748278facd2a42aa Mon Sep 17 00:00:00 2001 From: Jer Miller Date: Fri, 31 Jul 2026 21:43:00 -0600 Subject: [PATCH] test(observer): guard bound registration helper Assert the shared bound-observer registration helper writes a cert-class device binding with the expected fingerprint. This prevents helper regressions from silently minting unbound records while downstream tests continue authenticating on bearer keys. --- solstone/apps/observer/tests/test_routes.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/solstone/apps/observer/tests/test_routes.py b/solstone/apps/observer/tests/test_routes.py index d3bf965ea..edf51c6c9 100644 --- a/solstone/apps/observer/tests/test_routes.py +++ b/solstone/apps/observer/tests/test_routes.py @@ -651,7 +651,7 @@ def test_api_list_empty(observer_env): } -def test_register_bound_observer_helper_returns_descriptor(observer_env): +def test_register_bound_observer_helper_mints_cert_bound_record(observer_env): """Test creating a registered observer fixture.""" env = observer_env() @@ -668,6 +668,10 @@ def test_register_bound_observer_helper_returns_descriptor(observer_env): assert data["ingest_url"] == "/app/observer/ingest" assert data["key"] not in data["ingest_url"] assert data["protocol_version"] == OBSERVER_PROTOCOL_VERSION + record = observer_utils.load_observer(data["key"]) + assert record is not None + assert record["device_binding"]["kind"] == "cert" + assert record["device_binding"]["device"] == env.pl_identity().fingerprint def test_api_create_refuses_hand_mint(observer_env): -- 2.51.2