Remove credential-bearing Baton test paths by jmcentire · Pull Request #14 · wandercom/baton

jmcentire · 2026-06-04T22:59:50Z

Summary

replace control-plane authorization credential fixtures with injected authorization outcomes
remove generated private-material TLS rotation tests through injected certificate-metadata and reload-result seams
make Baton verification use python3 and import the source checkout reliably

static executable test/deploy credential-candidate scan produced no matches after these changes
make test lint (1074 passed; source compilation passed)

this PR intentionally contains no delegated connector/executor implementation
draft PR Add delegated connector executor with no-key verification paths #13 remains separate pending executor ownership reconciliation with the MEA integration lane

jmcentire added 3 commits June 4, 2026 17:59

test(control): inject credential-free authorization outcomes

5063f0b

test(certs): avoid private material in rotation coverage

b453838

build: run verification against source checkout

203f5de

jmcentire mentioned this pull request Jun 4, 2026

Add delegated connector executor with no-key verification paths #13

Closed

jmcentire merged commit 77a49ac into main Jun 4, 2026

jmcentire deleted the codex/no-key-test-hygiene branch June 4, 2026 23:00