fix: harden CI evidence and removal contracts

2026-08-02 14:48:04 +09:00
parent 1bb2cc4a20
commit f49d147b01
20 changed files with 1175 additions and 767 deletions
@@ -704,7 +704,11 @@ describe("supply-chain policy", () => {
  });

  it("wires the exact security fixture checker as a passing CI gate", async () => {
-    const contract = await loadCiGateContract(process.cwd());
+    const contract = await loadCiGateContract(process.cwd(), {
+      mode: process.env.CI_CONTRACT_MODE === "removal-fixture"
+        ? "removal-fixture"
+        : "canonical",
+    });
    const index = indexCiGateContract(contract);
    const securityGate = index.gates.get("FE-GATE-013");
    expect(securityGate).toBeDefined();