refactor: adapter 구현중..

tests/integration/security-followup-archive.test.ts

@@ -1,5 +1,5 @@
 import { spawnSync } from "node:child_process";
-import { cp, mkdtemp, readFile, rm, symlink } from "node:fs/promises";
+import { cp, mkdir, mkdtemp, readFile, rm, symlink, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 
@@ -119,6 +119,40 @@ it(
           failures: [],
         }),
       );
+
+      const outsideRoot = await mkdtemp(path.join(tmpdir(), "security-followup-outside-"));
+      try {
+        await mkdir(path.join(outsideRoot, "config/security"), { recursive: true });
+        await writeFile(
+          path.join(outsideRoot, "config/security/dependency-policy.json"),
+          '{"contradictoryCheckoutCanary":"FAIL"}\n',
+        );
+        const outsideVerification = spawnSync(
+          process.execPath,
+          [
+            path.join(sourceRoot, "scripts/verify-archived-local-evidence.ts"),
+            "--archive",
+            archivePath,
+            "--sha256",
+            expectedSha256,
+          ],
+          {
+            cwd: outsideRoot,
+            encoding: "utf8",
+            timeout: 120_000,
+            maxBuffer: 32 * 1024 * 1024,
+          },
+        );
+        expect(
+          outsideVerification.status,
+          `${outsideVerification.stdout}\n${outsideVerification.stderr}`,
+        ).toBe(0);
+        expect(outsideVerification.stdout).toContain(
+          "Archived local evidence verification: PASS",
+        );
+      } finally {
+        await rm(outsideRoot, { recursive: true, force: true });
+      }
     } finally {
       await rm(fixtureRoot, { recursive: true, force: true });
     }