()
| 114 | // 3. Workdir NOT included by default (matches runtime behavior). |
| 115 | #[test] |
| 116 | fn test_include_workdir_default() { |
| 117 | let yaml = r" |
| 118 | version: 1 |
| 119 | filesystem_policy: |
| 120 | read_only: |
| 121 | - /usr |
| 122 | "; |
| 123 | let model = policy::parse_policy_str(yaml).expect("parse"); |
| 124 | let readable = model.filesystem_policy.readable_paths(); |
| 125 | assert!(!readable.contains(&"/sandbox".to_owned())); |
| 126 | } |
| 127 | |
| 128 | // 4. Workdir excluded when include_workdir: false. |
| 129 | #[test] |
nothing calls this directly
no test coverage detected