Document system flow and next execution baseline

scripts/test_owner_decision_intake.py

@@ -0,0 +1,50 @@
+import json
+import sys
+import tempfile
+import unittest
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[0]))
+from validate_owner_decision_intake import BLOCKERS, validate
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+def complete_input(context_id):
+    return {"schema": "owner-decision-intake.v1", "context_id": context_id, "decision_set_id": "test", "decisions": [{"blocker": blocker, "decision": "approve", "owner": "owner", "reviewer": "reviewer", "rationale": "reviewed", "evidence": [{"path": "context-lock.json", "sha256": "0" * 64}], "new_context_required": True} for blocker in BLOCKERS]}
+
+
+class OwnerDecisionIntakeTests(unittest.TestCase):
+    def test_missing_input_fails_closed(self):
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            (root / "context-lock.json").write_text(json.dumps({"context_id": "ctx"}))
+            report = validate(root, Path("owner-decisions.json"), Path("report.json"))
+            self.assertEqual(report["status"], "blocked")
+            self.assertEqual(report["checks"]["gate_refresh_allowed"]["status"], "blocked")
+            self.assertEqual(report["checks"]["context_lock_unchanged"]["status"], "verified")
+
+    def test_complete_shape_is_valid_but_does_not_refresh_gate(self):
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            (root / "context-lock.json").write_text(json.dumps({"context_id": "ctx"}))
+            (root / "owner-decisions.json").write_text(json.dumps(complete_input("ctx")))
+            report = validate(root, Path("owner-decisions.json"), Path("report.json"))
+            self.assertEqual(report["status"], "verified")
+            self.assertEqual(report["checks"]["decision_approval"]["status"], "verified")
+            self.assertEqual(report["checks"]["gate_refresh_allowed"]["status"], "blocked")
+
+    def test_duplicate_blocker_is_rejected(self):
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            (root / "context-lock.json").write_text(json.dumps({"context_id": "ctx"}))
+            value = complete_input("ctx")
+            value["decisions"][-1]["blocker"] = BLOCKERS[0]
+            (root / "owner-decisions.json").write_text(json.dumps(value))
+            report = validate(root, Path("owner-decisions.json"), Path("report.json"))
+            self.assertEqual(report["status"], "blocked")
+            self.assertIn(BLOCKERS[5], report["checks"]["six_blocker_identity"]["missing"])
+
+
+if __name__ == "__main__":
+    unittest.main()