implementer 719fb4380b test: plant nested marker files in the layer-scan probe (E00-S02-T08) ...

The Docker-gated probe only planted a root-level .env.t08-* marker, which no
Dockerfile COPY instruction ever copies — so it could not observe a nested
build-context leak in the image layers. Plant additional marker files at
nested paths the Dockerfile's COPY apps/server apps/server would sweep into
the build-stage image (apps/server/.env.t08-*, apps/server/secrets/t08-*.pem)
so the end-to-end scan actually verifies the 'any depth' exclusion
guarantee, not just the root form.

2026-08-29 01:53:57 +00:00

..

architecture-import.test.mjs

feat: add dependency-boundary rule and architecture import test (E00-S01-T04)

2026-08-28 08:30:34 +00:00

build-targets.test.mjs

test: lock in amd64/arm64 build target criteria (E00-S02-T07)

2026-08-29 01:13:30 +00:00

compose-config.test.mjs

fix: make .dockerignore exclusions apply at any depth (E00-S02-T08)

2026-08-29 01:49:07 +00:00

frozen-install.test.mjs

fix: handle quoted scoped keys in frozen-install probe (E00-S02-T03)

2026-08-29 00:23:27 +00:00

health-endpoint.test.mjs

test: lock in app health endpoint criteria (E00-S02-T03)

2026-08-29 00:21:34 +00:00

no-core-extension-imports.test.mjs

test: lock in no core package imports a concrete extension (E00-S01-T14)

2026-08-28 23:24:02 +00:00

node-engine.test.mjs

test: lock in Node 24.x engine restriction (E00-S01-T08)

2026-08-28 09:15:09 +00:00

non-root-user.test.mjs

test: lock in non-root execution criteria (E00-S02-T05)

2026-08-29 00:41:16 +00:00

readonly-rootfs.test.mjs

test: lock in read-only rootfs criteria (E00-S02-T06)

2026-08-29 00:53:40 +00:00

root-commands.test.mjs

test: lock in root build/test/typecheck commands (E00-S01-T12)

2026-08-28 22:56:48 +00:00

secrets-not-embedded.test.mjs

test: plant nested marker files in the layer-scan probe (E00-S02-T08)

2026-08-29 01:53:57 +00:00

strict-tsconfig.test.mjs

test: lock in strict base tsconfig for all packages (E00-S01-T10)

2026-08-28 21:46:57 +00:00

typescript-pin.test.mjs

test: lock in TypeScript 6.0.3 exact dependency (E00-S01-T09)

2026-08-28 21:33:52 +00:00

workspace-config.test.mjs

test: lock in committed pnpm 11.23.0 workspace config (E00-S01-T07)

2026-08-28 09:03:50 +00:00

workspace-layout.test.mjs

test: lock in apps/packages/extensions workspace layout separation (E00-S01-T11)

2026-08-28 22:43:01 +00:00