Function TestDiffReadOnlyToolThatEgressed

internal/intent/diff_test.go:117–135

TestDiffReadOnlyToolThatEgressed: a read-only tool whose runtime opened a network connection violates its contract even though network is benign for bash -- the finding is CONDITIONAL on the declared contract, which is the core differentiator from a global policy rule.

(t *testing.T)

// bash -- the finding is CONDITIONAL on the declared contract, which is the core
// differentiator from a global policy rule.
func TestDiffReadOnlyToolThatEgressed(t *testing.T) {
	contracts := []IntentContract{{
		ID: "contract/tc3", Kind: ContractToolCall, ScopeAgent: "main", ToolCallID: "tc3",
		Operation: "file_read", Profile: profileFor(profiles(), "file_read"), Confidence: 0.5,
	}}
	effects := []RuntimeEffect{
		{Kind: EffectNetworkConnect, Target: "1.2.3.4", AgentID: "main", ToolCallID: "tc3", EventID: "e10", Confidence: 1},
	}
	diffs := Diff(contracts, effects)
	if _, ok := findDiff(diffs, func(d IntentRuntimeDiff) bool { return d.Status == StatusMismatch }); !ok {
		t.Fatalf("read-only tool that egressed must be a mismatch, got %+v", diffs)
	}
	// And the SAME effect under a bash/exec contract is allowed -> no mismatch.
	contracts[0].Operation = "exec"
	contracts[0].Profile = profileFor(profiles(), "exec")
	if _, ok := findDiff(Diff(contracts, effects), func(d IntentRuntimeDiff) bool { return d.Status == StatusMismatch }); ok {
		t.Fatal("network egress under a bash/exec contract is permitted; must not be a mismatch")
	}
}

func containsKind(ks []EffectKind, want EffectKind) bool {
	for _, k := range ks {