Function TestProcAdapterEnforcesAgentPolicy

cli/proc_tool_adapter_test.go:83–91

TestProcAdapterEnforcesAgentPolicy pins the security promise: the adapter's supervisor uses the agent's CommandValidator, so a command the one-shot exec would refuse is refused here too — @proc is not a side door.

(t *testing.T)

// supervisor uses the agent's CommandValidator, so a command the one-shot
// exec would refuse is refused here too — @proc is not a side door.
func TestProcAdapterEnforcesAgentPolicy(t *testing.T) {
	cli := &ChatCLI{logger: zap.NewNop()}
	t.Cleanup(cli.shutdownProcSupervisor)
	a := &procToolAdapter{cli: cli}

	if _, err := a.Start("sudo rm -rf /", ""); err == nil {
		t.Fatal("dangerous command must be refused by the shared validator")
	}
}