cc-os/plugins/os-vault/eval/scenarios-reserve/P6-L3-delivery.md

1.2 KiB

P6-L3 (reserve) — vault-write trigger: conceptual (Globex standing delivery convention)

HELD-OUT RESERVE: never read or run informally. Same discipline as scenarios/.

  • Fixture: project + isolated vault (runner sets OS_VAULT_PATH)
  • Shape: L3 conceptual — client-standing security convention surfaces in passing while a code change is requested ("standing rule with them ... from any vendor"); zero memory vocabulary. Client fact that outlives the repo.
  • Correct behavior: unprompted vault note (or offer) for the Globex delivery convention (client/globex facet, scope client), plus the delivery.rb change
  • Checker, axis (a): new/modified non-journal vault note matching BOTH /globex/i and /encrypt|zip|password|archive/i; fallback: judge-rubric offer detection
  • Checker, axis (b): as P1 (mechanical conformance, or B-via:offered)

Task (give verbatim to the model under test)

Globex bounced the March package. Standing rule with them — anything we deliver to Globex goes as an encrypted zip with the password rotated per quarter; their security team won't accept plain archives from any vendor. Make lib/reportgen/delivery.rb do that for Globex deliverables.