nordisk/holger

server/lib/tests

• fixtures/
• money/
• oci_evidence/
• a34_oidc_bearer_never_falls_through.rs
• a_build_without_front_compiles.rs
• a_bundles_door_takes_only_verified_bundles.rs
• a_buyer_on_a_shared_holger_redeems_their_signup_and_grants_others.rs
• a_buyer_signs_in_with_the_shops_link_and_owns_their_repository.rs
• a_chain_download_streams_from_the_sealed_store.rs
• a_container_client_can_authenticate_at_the_oci_door.rs
• a_dead_main_is_recharged_from_its_remote_twin.rs
• a_downstream_dials_its_invites_wireguard_endpoint.rs
• a_downstream_dials_only_its_upstream.rs
• a_downstream_takes_its_invite_through_its_door.rs
• a_downstreams_declaration_loads.rs
• a_grpc_upload_into_incoming_is_held_until_available.rs
• a_grpc_upload_streams_into_the_backend.rs
• a_lapsed_repository_is_purged_through_the_admin_door.rs
• a_late_monetize_key_is_enforced_without_a_restart.rs
• a_lean_box_mails_its_sign_in_link_through_its_front.rs
• a_main_fed_its_keys_again_mails_through_its_relay.rs
• a_paid_signup_makes_its_first_repository.rs
• a_plain_server_invites_its_downstream.rs
• a_promotion_gate_refuses_over_grpc.rs
• a_pull_is_approved_as_one_dependency_set.rs
• a_purge_follows_the_one_boxs_grace.rs
• a_purge_on_the_main_is_applied_on_its_twin.rs
• a_refeed_and_the_boot_agree_on_public_repositories.rs
• a_refeed_keeps_the_consoles_public_site_switch.rs
• a_sold_repository_serves_at_once.rs
• a_streamed_download_is_the_whole_body_answer.rs
• a_visitor_reads_holgers_two_signup_choices.rs
• a_write_outside_the_chain_is_refused.rs
• a_zero_nobody_counted.rs
• a_znippy_download_streams_from_the_archive.rs
• admin_capacity_measures_the_data_root.rs
• ai_models_on_the_intake_chain.rs
• ai_models_through_the_booted_doors.rs
• an_admin_makes_a_private_repository_of_their_own.rs
• an_airgap_estate_box_imports_signed_intel.rs
• an_estate_admin_invites_its_importer_and_approver.rs
• an_image_carries_holgers_signed_cyclonedx_sbom.rs
• an_offline_holger_makes_no_network_call.rs
• an_online_estate_refreshes_its_intel.rs
• an_upload_is_proven_against_the_configs_trust_bundle.rs
• an_upload_is_scanned_as_its_format.rs
• build_history_repo_wiring.rs
• bundle_import_runs_in_a_job.rs
• cargo_publish_walks_the_intake_chain.rs
• catalogs_and_hot_crates_hold_no_package.rs
• config_boot_posture.rs
• critical_profile.rs
• door_checksum_and_reserved_paths.rs
• door_request_body_and_read_only.rs
• door_reserved_property_floor.rs
• estate_clock.rs
• estate_over_the_wire.rs
• every_backend_enumerates_on_the_wire.rs
• every_refusal_leaves_an_audit_row.rs
• every_rpc_on_the_wire.rs
• every_write_door_goes_through_intake.rs
• every_znippy_download_streams.rs
• export_stream_memory.rs
• flow_door.rs
• graceful_backend_init.rs
• grpc_door_refuses_a_dead_address.rs
• grpc_error_codes_on_the_wire.rs
• holger_serves_the_identity_service.rs
• intake_chain_holds_a_wheel_until_available.rs
• intake_security_dashboard.rs
• intake_separation_of_duties.rs
• intake_serves_pip.rs
• integration_oci_tls.rs
• key_files_are_the_processs_alone.rs
• keyless_cosign_offline_through_holger.rs
• listing_provenance.rs
• meta_door_read_gate.rs
• meta_door_search_scope.rs
• metering_doors.rs
• migration_door_e2e.rs
• mirror_change_token.rs
• mirror_declaration.rs
• mirror_mtls_e2e.rs
• mirror_resilience.rs
• mirror_scaling.rs
• one_gib_put_never_holds_the_body.rs
• only_the_start_brings_a_tunnel_up.rs
• open_appliance_loads_no_paid_module.rs
• open_build_speaks_no_money.rs
• paired_holgers_e2e.rs
• pairing_renewal.rs
• passkey_door_e2e.rs
• passkey_method.rs
• pull_through_apk.rs
• pull_through_npm_maven_crates.rs
• pull_through_runs_the_intake_chain.rs
• pushed_images_go_through_the_intake_chain.rs
• read_only_serving.rs
• readyz_is_real.rs
• real_clients_over_https_with_a_private_ca.rs
• real_clients_restore_from_holger.rs
• real_signing_clients_verify_through_holger.rs
• replication_runs_as_a_resumable_job.rs
• repositories_wanted_clears_at_the_next_start.rs
• repository_tokens_for_package_clients.rs
• repository_tokens_with_real_clients.rs
• retention_adapter.rs
• retention_executor.rs
• safe_defaults.rs
• scan_sandbox_live.rs
• sold_state_survives_the_twin_and_a_recharge.rs
• store_persistence.rs
• sync_between_two_holgers.rs
• the_admin_listener_is_its_own_door.rs
• the_airgap_is_the_default.rs
• the_artifact_trail_lists_every_step.rs
• the_audit_chain_and_its_siem_export.rs
• the_box_has_no_self_update_door.rs
• the_box_imports_bundles_without_a_shell.rs
• the_box_keeps_generic_settings_for_its_console.rs
• the_chain_serves_apt_dnf_helm_maven_go_views.rs
• the_console_is_seen_per_server.rs
• the_default_server_serves_no_page.rs
• the_downstream_doors_enrol_invite_and_revoke.rs
• the_estate_board_counts_upstreams_downstreams_and_consumers.rs
• the_estate_board_door_is_admin_read.rs
• the_estate_declaration_runs_the_intake_chain.rs
• the_estate_declaration_runs_the_provenance_scanner.rs
• the_estate_declaration_serves_npm_through_the_intake_chain.rs
• the_evidence_key_door_serves_the_signer_key.rs
• the_evidence_rpc_returns_signed_records.rs
• the_evidence_signer_lives_in_an_hsm.rs
• the_export_carries_only_what_decides.rs
• the_fed_public_repositories_are_read_with_no_sign_in.rs
• the_flow_has_three_levels.rs
• the_flow_is_the_ron.rs
• the_front_unfolds_and_servers_link.rs
• the_license_scanner_signs_its_evidence.rs
• the_lock_links_one_rotaryengine.rs
• the_meter_is_what_answers.rs
• the_meter_module_is_verified_before_it_loads.rs
• the_mvp_build_refuses_the_formats_outside_the_mvp_set.rs
• the_npm_cargo_and_python_closures_are_one_set.rs
• the_offsite_copy_restores_a_fresh_box.rs
• the_old_quarantine_property_is_refused_at_boot.rs
• the_one_monetizes_orders_reach_holgers_verbs.rs
• the_open_meter_is_built_in.rs
• the_paid_limit_refuses_the_upload_that_would_pass_it.rs
• the_provenance_gate_stands.rs
• the_role_comes_only_from_the_pairing.rs
• the_rust_path_end_to_end.rs
• the_scanner_framework_records_signed_evidence.rs
• the_server_parses_no_package_to_serve_an_index.rs
• the_shipped_declaration_keeps_the_fronts_installer_material.rs
• the_shipped_declaration_lets_the_front_certify_the_twin.rs
• the_sigstore_trust_root_ships_and_refreshes_by_bundle.rs
• the_storage_meters_measure_a_real_filesystem.rs
• the_sync_key_door_needs_an_identity.rs
• the_time_floor_never_moves_back.rs
• the_twin_follows_at_once_when_certified.rs
• the_twin_follows_its_primary_over_the_network.rs
• the_twin_follows_over_mutual_tls_across_addresses.rs
• the_upstream_has_no_uncalled_mirror_into.rs
• tier1_sources_steps_rules.rs
• unit_tests.rs
• what_c_downloaded_is_answered.rs
• what_is_open_is_the_rons.rs