K8: record blocked owner review and release evidence

scripts/test_release_acceptance_remediation.py

@@ -0,0 +1,43 @@
+import json
+import sys
+import unittest
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+
+from generate_release_acceptance_remediation import OUTPUT, generate
+
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+class ReleaseAcceptanceRemediationTests(unittest.TestCase):
+    def test_contract_keeps_all_entries_blocked(self):
+        report = json.loads((ROOT / OUTPUT).read_text(encoding="utf-8"))
+        self.assertEqual(report["schema"], "release-acceptance-remediation.v1")
+        self.assertEqual(report["task_id"], "K8-REL-09")
+        self.assertEqual(report["status"], "complete")
+        self.assertEqual(report["remediation_status"], "blocked_no_eligible_entries")
+        self.assertEqual(report["counts"], {
+            "affected_entries": 1804,
+            "blocked_for_acceptance": 1804,
+            "eligible_for_acceptance": 0,
+            "manifest_accepted": 0,
+            "manifest_needs_owner": 6249,
+            "manifest_total": 8053,
+        })
+        self.assertEqual(report["release_action"], "STOP_RELEASE")
+        self.assertFalse(report["candidate_eligible"])
+        self.assertTrue(all(value["status"] == "verified" for value in report["checks"].values()))
+        self.assertEqual(len(report["blocked_entry_ids"]), 1804)
+
+    def test_generation_is_deterministic(self):
+        before = (ROOT / OUTPUT).read_bytes()
+        generated = generate(ROOT, ROOT / OUTPUT)
+        after = (ROOT / OUTPUT).read_bytes()
+        self.assertEqual(before, after)
+        self.assertEqual(generated["report_sha256"], json.loads(after.decode())["report_sha256"])
+
+
+if __name__ == "__main__":
+    unittest.main()