Skip to content

Issue #226: seeded Gateway acceptance test for historical consent and revocation - #236

Merged
KAVentures merged 2 commits into
mainfrom
test/issue-226-seeded-gateway-privacy-acceptance
Oct 16, 2026
Merged

KAVentures merged 2 commits into
mainfrom
test/issue-226-seeded-gateway-privacy-acceptance

Conversation

@KAVentures

@KAVentures KAVentures commented Oct 15, 2026 •

Copy link
Copy Markdown
Owner

Stack dependency and scope

Merge #237 FIRST. The original #236 independently reimplemented atomic consent (creating a conflicting implementation). I resolved that overlap by rebasing #236 onto #237's reviewed canonical atomic-consent branch. The only file this PR now changes relative to #237 is tests/test_issue226_gateway_history_e2e.py.

This test exercises the real FastAPI Gateway/SQLite handlers using an in-process test transport: one-time enrollment, default-off pre-enrollment history, explicit date-range preview and consent, device-side redaction, actor/organization isolation, remote-revoked 401, source policy change invalidating preview, partial upload requiring reapproval, and idempotent repeated event IDs. It never contacts live providers, shares private data, or enables historical uploads by default.

CI fix: The test used to assert an exception class from ordinary httpx, but FastAPI's in-process TestClient raises the analogous httpx2 exception. It now asserts the security-relevant HTTP status 401 on revocation instead of the implementation-specific exception class.

After #237 lands on main, confirm this PR targets main, run full CI on the resulting commit and merge only when green. Do not merge #236 before #237 or use this as evidence of a real customer-provider A/B/C evaluation.

Retargeted after #239 merged (2026-10-16): The branch is now a single-file commit 7deaeec2 on current main (8ce18e70), with #237 atomic consent and #239 Discovery exclusions already inherited from main. PR base is main and GitHub reports mergeable with one changed file (tests/test_issue226_gateway_history_e2e.py). Previous checks were all green on the earlier stacked branch. Added a new end-to-end regression demonstrating that a completed Discovery Mode study is excluded from explicit historical consent upload even when the user enrolls the Gateway later. Latest head a991e0b4; verify all checks on this head before merging. Remains draft until full merged-baseline CI verification. No production feature gate enabled.

@KAVentures
KAVentures force-pushed the test/issue-226-seeded-gateway-privacy-acceptance branch from d833cd8 to 7deaeec Compare October 16, 2026 10:50
@KAVentures
KAVentures changed the base branch from fix/issue226-atomic-history-preview-consent to main October 16, 2026 10:50
@KAVentures
KAVentures marked this pull request as ready for review October 16, 2026 10:55
@KAVentures
KAVentures merged commit 0007c35 into main Oct 16, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant