Function TestProvisionToVerified

internal/senderidentity/integration_test.go:99–133

TestProvisionToVerified drives the full River-backed flow against a real DB with a FakeProvider: EnqueueProvision → ProvisionWorker (pending) → enqueued ReconcileWorker → FakeProvider reports verified → domain.sending_status becomes "verified" and domain.sending_verified fires.

(t *testing.T)

// ReconcileWorker → FakeProvider reports verified → domain.sending_status
// becomes "verified" and domain.sending_verified fires.
func TestProvisionToVerified(t *testing.T) {
	pool := testutil.TestDB(t)
	ctx := context.Background()
	store := identity.NewStore(pool)

	freshRiver(t, pool)
	_, domain := setupVerifiedDomain(t, store, "siprov")

	fake := senderidentity.NewFakeProvider()
	// First reconcile poll already reports verified → no backoff wait.
	fake.SetStatus(domain, senderidentity.Result{Status: senderidentity.StatusVerified})

	rec := &recordingFire{}
	mgr, err := senderidentity.NewManager(pool, senderidentity.NewStoreAdapter(store), fake, rec.firer(), senderidentity.Config{})
	if err != nil {
		t.Fatalf("NewManager: %v", err)
	}
	if err := mgr.Start(ctx); err != nil {
		t.Fatalf("Start: %v", err)
	}
	defer mgr.Stop(context.Background())

	if err := mgr.EnqueueProvision(ctx, domain); err != nil {
		t.Fatalf("EnqueueProvision: %v", err)
	}

	waitForStatus(t, store, domain, "verified", 15*time.Second)

	if len(fake.ProvisionCalls) == 0 {
		t.Error("expected Provision to be called")
	}
	if rec.count() == 0 {
		t.Error("expected domain.sending_verified to fire")
	}
}

// TestProvisionFailsClosed drives a provider that reports the verification
// failed: status must end at "failed" (relay From, fail-closed) with the