+2 -11

docs/TEST_AUDIT.md

reviewed

··· 145 145 | `t/event-stream.t` | audited local regression | wire-format, malformed frame, and event decoding coverage | 146 146 | `t/applywrites-surfaces.t` | audited local regression | focused `applyWrites` happy-path and missing-delete behavior after the self-service invite, identity/email, label, and blob/sync happy paths were split out | 147 147 | `t/external-handle-update.t` | audited local regression | external-handle update semantics, including DID-resolution checks and empty-body success for external handle adoption | 148 148 - | `t/external-surface.t` | audited local regression | focused external-surface coverage for repo/blob export after splitting discovery, label RPC, account-status, and missing-blob checks into dedicated suites | 148 148 + | `t/sync-blob-export-surfaces.t` | audited local regression | focused sync/blob export coverage after splitting discovery, label RPC, account-status, and missing-blob checks into dedicated suites | 149 149 | `t/firehose.t` | audited local regression | repo subscription lifecycle, cursor, and CAR behavior | 150 150 | `t/identity.t` | local correctness/infrastructure | lower-level handle and DID helper coverage, including DNS-over-well-known preference and malformed-handle rejection | 151 151 | `t/import-repo.t` | audited local regression | focused `importRepo` snapshot-restore and rollback behavior, now cleaner after splitting the disabled-import policy gate into its own suite | ··· 182 182 | `t/store-sqlite.t` | audited local regression | store-level session, invite, label, and repo persistence behavior | 183 183 | `t/temp-endpoints.t` | audited local regression | isolated local coverage for `com.atproto.temp.*` semantics and admin credential revocation behavior | 184 184 | `t/tid-repair.t` | local correctness/infrastructure | TID repair and recovery helpers | 185 185 - ### Broad Mixed Suites 186 186 - 187 187 - The broadest suites are green and audited, but a small number still mix several categories of behavior inside the same file: 188 188 - 189 189 - - `t/applywrites-surfaces.t` 190 190 - Carries real conformance value for `applyWrites`, but it is now much narrower and mostly acts as a focused repo-write regression suite. 191 191 - - `t/external-surface.t` 192 192 - Carries strong external-surface coverage for repo/blob export. It is much cleaner after moving discovery, label-RPC, account-status, and missing-blob checks into dedicated suites, but still remains broader than a single-endpoint conformance file. 193 193 - 194 185 ## What This Audit Does Not Yet Claim 195 186 196 187 This document should not be read as claiming that: ··· 212 203 4. decide whether to tighten admin auth to reference semantics or document the bearer shortcut as a permanent extension 213 204 5. keep local testing-only toggles, like the email-confirmation bypass, pinned in focused suites instead of letting broad mixed suites depend on them implicitly 214 205 6. keep narrowing the local `ServiceProxy` surface until every locally answered `app.bsky.*` field is either authoritative or explicitly documented as a local-only extension 215 215 - 7. keep documenting broad suites like `t/applywrites-surfaces.t` and `t/external-surface.t` as mixed conformance-plus-product coverage rather than over-claiming that every assertion is a pure reference check 206 206 + 7. keep documenting any future mixed suites as mixed conformance-plus-product coverage rather than over-claiming that every assertion is a pure reference check 216 207 217 208 ## Practical Reading Of The Current Status 218 209

t/external-surface.t t/sync-blob-export-surfaces.t

reviewed