K8: record blocked owner review and release evidence

scripts/test_release_remediation_intake.py

@@ -0,0 +1,39 @@
+import json
+import sys
+import unittest
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+
+from generate_release_remediation_intake import OUTPUT, generate
+
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+class ReleaseRemediationIntakeTests(unittest.TestCase):
+    def test_intake_contract_preserves_stop_and_expands_six_items(self):
+        report = json.loads((ROOT / OUTPUT).read_text(encoding="utf-8"))
+        self.assertEqual(report["schema"], "release-remediation-intake.v1")
+        self.assertEqual(report["intake_id"], "K8-REL-07")
+        self.assertEqual(report["status"], "complete")
+        self.assertEqual(report["intake_decision"], "remediation_required")
+        self.assertEqual(report["release_action"], "STOP_RELEASE")
+        self.assertFalse(report["candidate_eligible"])
+        self.assertEqual(report["blocked_count"], 6)
+        self.assertTrue(all(value["status"] == "verified" for value in report["checks"].values()))
+        self.assertEqual([row["task_id"] for row in report["work_items"]], [
+            "K8-REL-08", "K8-REL-09", "K8-REL-10", "K8-REL-11", "K8-REL-12", "K8-REL-13",
+        ])
+        self.assertTrue(all(row["status"] == "blocked" for row in report["work_items"]))
+
+    def test_generation_is_deterministic(self):
+        before = (ROOT / OUTPUT).read_bytes()
+        generated = generate(ROOT, ROOT / OUTPUT)
+        after = (ROOT / OUTPUT).read_bytes()
+        self.assertEqual(before, after)
+        self.assertEqual(generated["report_sha256"], json.loads(after.decode())["report_sha256"])
+
+
+if __name__ == "__main__":
+    unittest.main()