Proudlock 5cd5332397 Add agent fingerprinting, client certificate auth, and security audit documentation ...

This commit adds:
- Database migrations for app_delta fingerprints and client certificates
- Scripts for certificate generation and fingerprint backfilling
- Comprehensive security audit reports and findings tracking
- Implementation documentation for certificate authentication
- Test utilities for certificate renewal and fingerprinting
- GE-ENFORCE collector fix documentation

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2026-09-15 09:18:12 -04:00

..

test_core

Add plugins.get_plugin_settings_routes to PUBLIC_ENDPOINTS

2026-09-11 17:06:59 -04:00

test_plugins

Add agent fingerprinting, client certificate auth, and security audit documentation

2026-09-15 09:18:12 -04:00

__init__.py

Initial import: shopdb-flask multi-site asset platform

2026-07-14 07:58:51 -04:00

conftest.py

Initial import: shopdb-flask multi-site asset platform

2026-07-14 07:58:51 -04:00

test_api_inventory_parity.py

Security hardening, multi-site portability, and a documentation and API-surface sweep

2026-08-14 16:28:34 -04:00

test_api_namespace.py

Buildings and levels for the floor map, and make every identifier searchable

2026-08-17 13:03:54 -04:00

test_bundle_lock.py

Windows installer: payload hash-locking, SBOM, client-IP handling, operator docs

2026-08-03 15:08:20 -04:00

test_csv_import.py

Fix numeric natural keys resolving to the wrong asset on import

2026-08-31 15:55:31 -04:00

test_docs_publishable.py

Endpoint telemetry, PC Detail rework and a checked backup/restore path

2026-09-06 18:53:11 -04:00

test_docs_versions.py

Endpoint telemetry, PC Detail rework and a checked backup/restore path

2026-09-06 18:53:11 -04:00

test_endpoint_command_reaper.py

Merge the wilm delivery work into main

2026-08-30 19:41:15 -04:00

test_fix_drive_letter_sharepaths.py

Repair backup revisions that recorded a mapped drive

2026-08-25 15:00:57 -04:00

test_import_sources.py

add Entra device identity to computers and Azure/Thor import sources

2026-08-25 16:46:00 -04:00

test_installer_defaults.py

Release 0.8.0: Windows installer, twelve fixes from a real Server 2019 install, operator docs

2026-08-05 07:36:43 -04:00

test_installer_state.py

Release 0.8.0: Windows installer, twelve fixes from a real Server 2019 install, operator docs

2026-08-05 07:36:43 -04:00

test_lean_build_guards.py

backups in universal site profile; profile completeness guard

2026-08-07 14:44:42 -04:00

test_maintenance_scripts.py

Maintenance scripts load .env, so they reach the site's real database

2026-08-24 14:32:38 -04:00

test_no_hidden_tests.py

Merge the wilm delivery work into main

2026-08-30 19:41:15 -04:00

test_openapi_spec.py

Security hardening, multi-site portability, and a documentation and API-surface sweep

2026-08-14 16:28:34 -04:00

test_plugin_contract.py

Initial import: shopdb-flask multi-site asset platform

2026-07-14 07:58:51 -04:00

test_plugin_importguard.py

Bump plugin contract to 0.32.0 and register new plugin tables

2026-09-07 12:40:12 -04:00

test_plugin_lifecycle.py

ADR-013 Phase 2: enforcement + signed shelf + adopt (adversarial-review hardened)

2026-07-18 21:06:38 -04:00

test_plugin_loader.py

Initial import: shopdb-flask multi-site asset platform

2026-07-14 07:58:51 -04:00

test_plugin_migrations.py

Fix fleet alert server surface inherited from wj

2026-09-09 13:20:54 -04:00

test_plugin_packaging.py

ADR-013 Phase 2: enforcement + signed shelf + adopt (adversarial-review hardened)

2026-07-18 21:06:38 -04:00

test_plugin_prune_schema.py

ADR-014 Phase 2: flask plugin prune-schema for lean per-site DBs

2026-07-19 11:39:51 -04:00

test_plugin_scaffold_frontend.py

Search results open the record they found; plugin scaffolder emits a prunable frontend

2026-08-24 14:06:14 -04:00

test_plugin_scaffold.py

Initial import: shopdb-flask multi-site asset platform

2026-07-14 07:58:51 -04:00

test_plugin_settings_reachable.py

Gate both kiosks behind a device token, and make an unreachable setting a test failure

2026-09-02 18:11:01 -04:00

test_plugin_shelf.py

ADR-013 Phase 2: enforcement + signed shelf + adopt (adversarial-review hardened)

2026-07-18 21:06:38 -04:00

test_plugin_verification.py

ADR-013 Phase 2: enforcement + signed shelf + adopt (adversarial-review hardened)

2026-07-18 21:06:38 -04:00

test_runtime_dependencies.py

Merge the wilm delivery work into main

2026-08-30 19:41:15 -04:00

test_sbom.py

Windows installer: payload hash-locking, SBOM, client-IP handling, operator docs

2026-08-03 15:08:20 -04:00

test_scan_sbom.py

Recommend the smallest upgrade that clears an advisory, not the highest

2026-08-29 17:24:52 -04:00

test_security_config.py

Initial import: shopdb-flask multi-site asset platform

2026-07-14 07:58:51 -04:00

test_site_import_loader.py

Reciprocal controls links, dead chip links, and a resumable legacy import

2026-08-29 19:09:06 -04:00

test_smoke.py

Initial import: shopdb-flask multi-site asset platform

2026-07-14 07:58:51 -04:00

test_winc_import_routes.py

Make a partly-undone import retryable, and refuse a plan it cannot deliver

2026-09-03 09:16:01 -04:00