Repository navigation
TEST 125
Give the broker a sealed fixture grant spanning a pinned LBA server and a distinct synthetic-UI server. The policy's final decision group contains exactly the task-bound approve and hold candidates for click_target. Include same-name tools under different server identities. Attempt each valid candidate, an altered candidate, server substitution, contract digest drift, wrong order, selecting twice, retry after failure, expired grants, another run ID, another VM UUID, and a model-proposed new server. Record whether each fake MCP client was invoked.
Offline multi-server cases test_multiserver_grant_binds_exact_server_identity_through_dispatch, test_stdio_ui_action_flows_through_server_set_broker_router_and_oracle, choice-group validation/tamper cases, dispatch-expiry rejection, and client-failure no-retry passed through PR #254, merge 61d6e6dd3ff435d6d30c5edc370aea4d61f2236f. Exactly one sealed candidate reaches the pinned synthetic-UI client; no second selection or failure retry is dispatched. Full suites passed 2,231 tests at 97% scripts coverage and all seven PR checks passed. No live VM or capture run was performed.