tenant_harness

Deterministic tenant isolation and policy runtime harness (M29).

Types

Full M29 report.

pub type Report {
  Report(
    outcomes: List(ScenarioOutcome),
    failed_scenarios: Int,
    nondeterministic_failures: Int,
  )
}

Report(
  outcomes: List(ScenarioOutcome),
  failed_scenarios: Int,
  nondeterministic_failures: Int,
)

M29 conformance scenarios.

pub type Scenario {
  TenantBoundaryAuthz
  DenialTelemetryObservable
  PerTenantBudgetQuotas
  NoisyNeighborContainment
  OperatorAuditability
}

One scenario outcome.

pub type ScenarioOutcome {
  ScenarioOutcome(
    scenario: Scenario,
    passed: Bool,
    deterministic: Bool,
    signature: String,
  )
}

ScenarioOutcome(
  scenario: Scenario,
  passed: Bool,
  deterministic: Bool,
  signature: String,
)

pub fn deterministic(outcome: ScenarioOutcome) -> Bool

Determinism accessor.

pub fn failed_scenarios(report: Report) -> Int

Failed scenario count.

pub fn nondeterministic_failures(report: Report) -> Int

Nondeterministic failure count.

pub fn outcomes(report: Report) -> List(ScenarioOutcome)

Report outcomes.

pub fn pass_fail_label(outcome: ScenarioOutcome) -> String

Stable pass/fail label.

pub fn report_signature(report: Report) -> String

Stable report signature.

pub fn run_matrix() -> Report

Run all M29 scenarios.

pub fn run_scenario(scenario: Scenario) -> ScenarioOutcome

Run one scenario twice and require deterministic parity.

pub fn scenario(outcome: ScenarioOutcome) -> Scenario

Scenario accessor.

pub fn scenario_label(scenario: Scenario) -> String

Scenario label.

pub fn signature(outcome: ScenarioOutcome) -> String

Scenario signature.

pub fn snapshot_report_markdown() -> String

Deterministic markdown report for fixture scripts.

pub fn snapshot_signature() -> String

Deterministic snapshot signature for fixture drift gates.

pub const snapshot_version: Int