Add AXIS state and gate contracts

scripts/test_axis_contract_report.py

@@ -0,0 +1,34 @@
+#!/usr/bin/env python3
+"""Contract tests for AXIS-CON-01..04 evidence."""
+
+from __future__ import annotations
+
+import hashlib
+import json
+import unittest
+from pathlib import Path
+
+import generate_axis_contract_report
+
+ROOT = Path(__file__).resolve().parents[1]
+REPORT = ROOT / "coverage/axis-contract.report.json"
+
+
+class AxisContractReportTests(unittest.TestCase):
+    def test_contract(self) -> None:
+        report = json.loads(REPORT.read_text(encoding="utf-8"))
+        self.assertEqual(report["schema"], "axis-contract-report.v1")
+        self.assertEqual(report["task_id"], "AXIS-CON-01..04")
+        self.assertEqual(report["status"], "verified")
+        self.assertEqual(report["implementation"]["commands"], 18)
+        self.assertEqual(len(report["matrix_samples"]), 6)
+        self.assertTrue(report["checks"]["idempotency_boundary"]["pure_gate_does_not_send"])
+
+    def test_self_hash(self) -> None:
+        report = json.loads(REPORT.read_text(encoding="utf-8"))
+        unsigned = {key: value for key, value in report.items() if key != "report_sha256"}
+        self.assertEqual(report["report_sha256"], hashlib.sha256(generate_axis_contract_report.canonical(unsigned).encode()).hexdigest())
+
+
+if __name__ == "__main__":
+    unittest.main()