mirror of
https://github.com/shankar0123/certctl.git
synced 2026-06-07 18:21:32 +00:00
cowork
7f1616f41b
Final CI threshold raise commit on top of all the *-extended bundles
(J / N.A/B / N.C). Each raise verified to have >=3pp margin below
the current measured package-scoped coverage to absorb the global-run
per-file-average dip vs package-scoped runs.
Raises applied
=================
internal/connector/issuer/acme/ 50 -> 80 (HEAD 85.4% post-J-ext;
Pebble mock + HTTP-01 +
DNS-01 + DNS-PERSIST-01
challenge flows)
internal/service/ 55 -> 70 (HEAD 73.4% post-N.C-ext;
CertificateService +
AgentService delegator
round-out)
internal/api/handler/ 60 -> 75 (HEAD 79.8% post-N.C-ext;
IssuerHandler ctor +
HealthCheckHandler dispatch)
Held at prior floors (already met; further raises deferred)
=================
internal/crypto/ 88 (HEAD 88.2%; 92 deferred — needs
rand.Reader / aes.NewCipher
seams for fail-branch testing)
internal/connector/issuer/local/ 86 (HEAD 86.7%; 92 deferred — needs
crypto/x509 signing-error seams)
internal/pkcs7/ 100% informational (global-run
measurement artifact)
internal/connector/issuer/stepca/ 80 (HEAD 90.4%; future raise possible)
internal/mcp/ 85 (HEAD 93.1%; future raise possible)
Verification
=================
- python3 yaml.safe_load: OK
- All raised floors verified met by current package-scoped coverage
(with >=3pp margin)
Audit deliverables
=================
- extension-progress.md: R-CI-extended marked DONE with raise table
- CHANGELOG.md: full Bundle R-CI-extended entry
Bundle: R-CI-extended raise (Coverage Audit Extension)