test: commit a verify-build failure-mode battery and run it from make check (closes #227)

2026-08-12 11:05:08 +02:00
parent afe6ddaea0
commit 78a1cb067e
4 changed files with 462 additions and 3 deletions
--- a/TODO.md
+++ b/TODO.md
@@ -44,6 +44,12 @@ undefined identifiers, which is how

 # Completed Steps

+- 2026-08-12: `script/verify-build`'s failure modes are now a committed target,
+  `script/test-verify-build`, run by `make check`. It asserts the exit status
+  and the message of every case against a fixture tree in a temp dir, and drops
+  privileges (proving the runner against a mode-000 file first) for the cases
+  that only mean something when file permissions are in force
+  ([#227](https://git.eeqj.de/sneak/AutistMask/issues/227)).
 - 2026-08-12: WaitTx lifecycle: a receipt and the 60-second timeout can no
  longer both render on one tick, no timer or in-flight lookup outlives its
  wait, a failed receipt lookup no longer counts as a timeout (but six in a row