Function tampered_same_signer_is_x

atomic-cli/src/commands/intent/list.rs:432–457

()

    #[test]
    fn tampered_same_signer_is_x() {
        // A fresh attestation whose stored body was mutated after signing, with a
        // DID that MATCHES the resolving key ⇒ DID-match passes, verify() returns
        // a hash mismatch ⇒ '✗'. Distinguishes ✗ (real failure) from '–'.
        let (repo, ids, _dir) = repo_with_intents(1);
        let kp = KeyPair::generate();
        let mut node = attest_with(&repo, &ids[0], &kp);
        write_tracked(&repo, &ids[0], &node);
        // Confirm untampered verifies.
        assert_eq!(row_for(&repo, &ids[0], Some(&kp)).verifies, Verifies::Yes);

        // Tamper a signed field (the title/text) AFTER signing but keep the same
        // attributedTo DID and the same recorded sourceContentHash (so it stays
        // Fresh). The content hash / signature no longer match the body.
        node.title = "tampered title".to_string();
        write_tracked(&repo, &ids[0], &node);

        let row = row_for(&repo, &ids[0], Some(&kp));
        assert_eq!(
            row.attested,
            Attested::Fresh,
            "still fresh (hash anchor kept)"
        );
        assert_eq!(row.verifies, Verifies::No, "tampered same-signer ⇒ '✗'");
        assert_eq!(row.verifies.table(), "✗");
    }

    #[test]
    fn other_signer_is_na_not_x() {