K8: record blocked owner review and release evidence

scripts/test_browser_matrix_remediation.py

@@ -0,0 +1,37 @@
+import json
+import sys
+import unittest
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+
+from generate_browser_matrix_remediation import OUTPUT, generate
+
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+class BrowserMatrixRemediationTests(unittest.TestCase):
+    def test_contract_records_planned_matrix_and_explicit_environment_gap(self):
+        report = json.loads((ROOT / OUTPUT).read_text(encoding="utf-8"))
+        self.assertEqual(report["schema"], "browser-matrix-remediation.v1")
+        self.assertEqual(report["task_id"], "K8-REL-12")
+        self.assertEqual(report["status"], "complete")
+        self.assertEqual(report["remediation_status"], "blocked_matrix_unverified")
+        self.assertEqual(report["declared_matrix"]["minimum"], {"chromium": "TBD", "firefox": "TBD", "safari": "TBD"})
+        self.assertEqual(report["release_action"], "STOP_RELEASE")
+        self.assertFalse(report["candidate_eligible"])
+        self.assertTrue(all(value["status"] == "verified" for value in report["checks"].values()))
+        self.assertEqual({row["browser"] for row in report["observed_browsers"]}, {"chromium", "firefox", "safari"})
+        self.assertEqual(report["observed_browsers"][2]["browser"], "safari")
+
+    def test_generation_is_deterministic(self):
+        before = (ROOT / OUTPUT).read_bytes()
+        generated = generate(ROOT, ROOT / OUTPUT)
+        after = (ROOT / OUTPUT).read_bytes()
+        self.assertEqual(before, after)
+        self.assertEqual(generated["report_sha256"], json.loads(after.decode())["report_sha256"])
+
+
+if __name__ == "__main__":
+    unittest.main()