Paul O'Reilly b7cf256c44 test(invariants): HC-11 forge-credential layers must declare write_targets (xfail until layers are stamped) ...

Helper tests/invariants/forge_credentials.py detects credential carriers via
mounts[]/env/secrets_required[]/ssh_hosts[]; today gitea-admin, gitea-ssh,
gitea-ssh-accelerators, gitea-ssh-homelab are found and none declare
write_targets — the invariant xfails(strict) until the CRS-103 rollout stamps them.

Claude-Session: https://claude.ai/code/session_018LRh1S2bHJYhEgrMu3UJx8

2026-09-13 13:09:24 +12:00

..

__init__.py

test(invariants): HC-11 forge-credential layers must declare write_targets (xfail until layers are stamped)

2026-09-13 13:09:24 +12:00

forge_credentials.py

test(invariants): HC-11 forge-credential layers must declare write_targets (xfail until layers are stamped)

2026-09-13 13:09:24 +12:00

test_forge_credentials_declare_write_targets.py

test(invariants): HC-11 forge-credential layers must declare write_targets (xfail until layers are stamped)

2026-09-13 13:09:24 +12:00