Add native Project API ownership guard probe by scotwells · Pull Request #58 · datum-cloud/test-infra · GitHub
Skip to content

Add native Project API ownership guard probe - #58

Draft
scotwells wants to merge 1 commit into
codex/apps-native-vz-project-bootstrapfrom
codex/apps-native-guard-probe
Draft

scotwells wants to merge 1 commit into
codex/apps-native-vz-project-bootstrapfrom
codex/apps-native-guard-probe

Conversation

@scotwells

Copy link
Copy Markdown
Contributor

Summary

Adds a bounded probe for Milo's default ownership protection through the real Project API, checking ordinary writes and reserved-marker denial.

Every mutation is tied to the dedicated fixture; private intent evidence supports UID-safe ConfigMap cleanup while retaining the Namespace for fixture teardown.

Depends on #57 and contributes to datum-cloud/enhancements#929. Live execution follows the separately reviewed Milo upgrade.

Validation

  • Twelve offline cases cover exact source identity, guard-specific denials, stale patches, replacement UIDs, and incomplete cleanup.
  • Independent review corrected namespace cascading and ambiguous create recovery.
  • Real Project API execution with the pinned ownership guard.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant